Skip to content
OpenAdvisories
Critical 1 exploited CVE USN-3565-1 1 CVE

exim4 vulnerability

Published Feb 12, 2018 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

Meh Chang discovered that Exim incorrectly handled memory in certain
decoding operations. A remote attacker could use this issue to cause Exim
to crash, resulting in a denial of service, or possibly execute arbitrary
code.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS exim4 4.82-3ubuntu2.4
Ubuntu · 16.04 LTS 16.04:LTS exim4 4.86.2-2ubuntu2.3

Vulnerabilities 1

  • Critical 9.8
    CVE-2018-6789 Exploited · Ransomware Public exploit EPSS 82%

    An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By sending a handcrafted me…

    exim4 exim4 exim Debian Ubuntu Alpine
    KEV Nov 3, 2021

References

  • report
    https://ubuntu.com/security/CVE-2018-6789