CVE-2020-12783

概要

参考情報

• openwall.com/lists/oss-security/2021/05/04/7 · Exploit
• bugs.exim.org/show_bug.cgi · Third Party Advisory
• git.exim.org/exim.git/commit/57aa14b216432be381b6295c312065b2fd034f86 · Patch
• git.exim.org/exim.git/commit/a04174dc2a84ae1008c23b6a7109e7fa3fb7b8b0 · Patch
• lists.debian.org/debian-lts-announce/2020/05/msg00017.html · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F6IQQ2SERFUD4WMRSX6XYDNK7Q4GPT7Y
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M7Z5UG6ZIG32V7M4PP3BCC65C27EWK7G
• usn.ubuntu.com/4366-1 · Third Party Advisory
• debian.org/security/2020/dsa-4687 · Third Party Advisory

exim のその他の脆弱性

• CVE-2026-94057中 5.3Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data…
• CVE-2026-94056高 7.5Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from…
• CVE-2026-94055中 5.3Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free.
• CVE-2026-94054中 5.3Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write.
• CVE-2026-66141高 7.8Exim before 4.99.5 allows .forward privilege escalation because force_command for a pipe transport is mishandled.