Skip to content
OpenAdvisories
High DLA-3938-1 4 CVEs

exim4 - security update

Published Oct 28, 2024 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 exim4 4.94.2-7+deb11u4

Vulnerabilities 4

  • High 8.1
    CVE-2023-42117

    Exim Improper Neutralization of Special Elements Remote Code Execution Vulnerability

    Exim Improper Neutralization of Special Elements Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Exim. Authentication is not required to exploit this vulnerability. The spe…

    Exim Exim exim4 exim4 Debian Ubuntu Alpine Wolfi
  • Medium 4.6
    CVE-2022-3559

    Exim Regex use after free

    A vulnerability was found in Exim and classified as problematic. This issue affects some unknown processing of the component Regex Handler. The manipulation leads to use after free. The name of the patch is 4e9ed49f8f12eb331b29bd5b6dc3693c520fddc2. It is reco…

    exim4 exim4 Debian Ubuntu
  • Low 3.1
    CVE-2023-42119

    Exim dnsdb Out-Of-Bounds Read Information Disclosure Vulnerability

    Exim dnsdb Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Exim. Authentication is not required to exploit this vulnerability. The spe…

    Exim Exim exim4 exim4 Debian Ubuntu Alpine
  • Unscored —
    CVE-2021-38371

    The STARTTLS feature in Exim through 4.94.2 allows response injection (buffering) during MTA SMTP sending.

    exim4 exim4 Debian Ubuntu