CVE-2022-37452

CRITICAL 9.8CVE-2022-37452 · Published 07/08/2022 · updated 17/06/2026

In short

CVE-2022-37452 is a CRITICAL (CVSS 9.8) vulnerability affecting exim (exim).
Chance of exploitation in the next 30 days (EPSS): 3.8%, higher than 89.9% of all vulnerabilities.
Fix: update to 4.95 or later.

Package	Affected versions	Patched versions
exim exim	`< 4.95`	`4.95`

Exim before 4.95 has a heap-based buffer overflow for the alias list in host_name_lookup in host.c when sender_host_name is set.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

< 4.95

4.95

More vulnerabilities in exim

See all →