CVE-2022-37451

Description

References

• cwe.mitre.org/data/definitions/762.html · Third Party Advisory
• Exim/exim commit 51be321 · Patch
• Exim/exim · Release Notes
• Exim/exim · Release Notes
• ivd38/exim_invalid_free · Exploit
• lists.exim.org/lurker/message/20220625.141825.d6de6074.en.html · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LETR5CVDPFOFQHXCJP6NFLG52JZHQYDY
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XSWDF4QEXD4TDWQLYQOWCHBJKTDQR4Z7
• exim.org/static/doc/security · Vendor Advisory
• openwall.com/lists/oss-security/2022/08/06/1 · Mailing List

Más vulnerabilidades de exim

• CVE-2026-94057MEDIO 5.3Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data…
• CVE-2026-94056ALTO 7.5Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from…
• CVE-2026-94055MEDIO 5.3Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free.
• CVE-2026-94054MEDIO 5.3Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write.
• CVE-2026-66141ALTO 7.8Exim before 4.99.5 allows .forward privilege escalation because force_command for a pipe transport is mishandled.