CVE-2022-3559

Mô tả

Tham khảo

• bugs.exim.org/show_bug.cgi · Patch
• git.exim.org/exim.git/commit/4e9ed49f8f12eb331b29bd5b6dc3693c520fddc2 · Patch
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EIH4W5R7SHTUEQFWWKB4TUO5YFZX64KV · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TMQ6OCKPNPBPSD37YR4FOWV2R54M2UEP · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WFHLZVHNNO2GWYP5EA4TZQZ5O4GVPARR · Mailing List
• vuldb.com · Third Party Advisory
• lists.debian.org/debian-lts-announce/2024/10/msg00029.html

Lỗ hổng khác của exim

• CVE-2026-94057TRUNG BÌNH 5.3Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data…
• CVE-2026-94056CAO 7.5Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from…
• CVE-2026-94055TRUNG BÌNH 5.3Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free.
• CVE-2026-94054TRUNG BÌNH 5.3Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write.
• CVE-2026-66141CAO 7.8Exim before 4.99.5 allows .forward privilege escalation because force_command for a pipe transport is mishandled.