What it is
Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other Exim entries on the list
- Exim Exim Privilege Escalation Vulnerability CVE-2010-4345 · Mar 25, 2022
- Exim Internet Mailer Exim Out-of-bounds Write Vulnerability CVE-2019-16928 · Mar 3, 2022
- Mail Transfer Agent (MTA) Exim Mail Transfer Agent (MTA) Improper Input Validation CVE-2019-10149 · Jan 10, 2022
- Exim Exim Buffer Overflow Vulnerability CVE-2018-6789 · Nov 3, 2021