CVE-2025-26794

Mô tả

Tham khảo

• bugzilla.suse.com/show_bug.cgi · Issue Tracking
• code.exim.org/exim/exim/commit/bfe32b5c6ea033736a26da8421513206db9fe305 · Patch
• exim.org · Product
• exim.org/static/doc/security/EXIM-Security-2025-12-09.1/report.txt
• Exim/exim · Vendor Advisory
• NixOS/nixpkgs#383926 · Release Notes
• openbsd/ports commit 584d2c4 · Patch
• exim.org/static/doc/security/CVE-2025-26794.txt · Vendor Advisory
• openwall.com/lists/oss-security/2025/02/19/1 · Mailing List
• openwall.com/lists/oss-security/2025/02/21/4 · Mailing List
• openwall.com/lists/oss-security/2025/02/21/5 · Mailing List

Lỗ hổng khác của exim

• CVE-2026-94057TRUNG BÌNH 5.3Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data…
• CVE-2026-94056CAO 7.5Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from…
• CVE-2026-94055TRUNG BÌNH 5.3Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free.
• CVE-2026-94054TRUNG BÌNH 5.3Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write.
• CVE-2026-66141CAO 7.8Exim before 4.99.5 allows .forward privilege escalation because force_command for a pipe transport is mishandled.