CVE-2020-28018

Description

References

• openwall.com/lists/oss-security/2021/05/11/14 · Mailing List
• openwall.com/lists/oss-security/2021/05/11/15 · Mailing List
• openwall.com/lists/oss-security/2021/05/11/17 · Mailing List
• openwall.com/lists/oss-security/2021/05/11/5 · Mailing List
• openwall.com/lists/oss-security/2021/05/11/6 · Mailing List
• openwall.com/lists/oss-security/2021/05/12/2 · Mailing List
• openwall.com/lists/oss-security/2021/05/12/3 · Mailing List
• exim.org/static/doc/security/CVE-2020-qualys/CVE-2020-28018-OCORK.txt · Vendor Advisory

exim의 다른 취약점

• CVE-2026-94057보통 5.3Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data…
• CVE-2026-94056높음 7.5Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from…
• CVE-2026-94055보통 5.3Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free.
• CVE-2026-94054보통 5.3Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write.
• CVE-2026-66141높음 7.8Exim before 4.99.5 allows .forward privilege escalation because force_command for a pipe transport is mishandled.