What it is
Exim contains a buffer overflow vulnerability in the base64d function part of the SMTP listener that may allow for remote code execution.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other Exim entries on the list
- Exim Exim Privilege Escalation Vulnerability CVE-2010-4345 · Mar 25, 2022
- Exim Exim Heap-Based Buffer Overflow Vulnerability CVE-2010-4344 · Mar 25, 2022
- Exim Internet Mailer Exim Out-of-bounds Write Vulnerability CVE-2019-16928 · Mar 3, 2022
- Mail Transfer Agent (MTA) Exim Mail Transfer Agent (MTA) Improper Input Validation CVE-2019-10149 · Jan 10, 2022