Skip to content
OpenAdvisories
Critical DSA-5512-1 3 CVEs

exim4 - security update

Published Oct 2, 2023 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 11 exim4 4.94.2-7+deb11u1
Debian · 12 exim4 4.96-15+deb12u2

Vulnerabilities 3

  • Critical 9.8
    CVE-2023-42115 Public exploit EPSS 12%

    Exim AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability

    Exim AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Exim. Authentication is not required to exploit this vulnerability. The specific flaw exists w…

    Exim Exim exim4 exim4 Debian Ubuntu Alpine Wolfi
  • High 8.1
    CVE-2023-42116

    Exim SMTP Challenge Stack-based Buffer Overflow Remote Code Execution Vulnerability

    Exim SMTP Challenge Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Exim. Authentication is not required to exploit this vulnerability. The spec…

    Exim Exim exim4 exim4 Debian Ubuntu Alpine Wolfi
  • Low 3.7
    CVE-2023-42114 EPSS 27%

    Exim NTLM Challenge Out-Of-Bounds Read Information Disclosure Vulnerability

    Exim NTLM Challenge Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Exim. Authentication is not required to exploit this vulnerability. The spec…

    Exim Exim exim4 exim4 Debian Ubuntu Alpine Wolfi