Skip to content
OpenAdvisories
Critical 1 exploited CVE USN-4010-1 1 CVE

exim4 vulnerability

Published Jun 5, 2019 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Exim incorrectly handled certain decoding
operations. A remote attacker could possibly use this issue to execute
arbitrary commands.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS exim4 4.90.1-1ubuntu1.2

Vulnerabilities 1

  • Critical 9.0
    CVE-2019-10149 Exploited Public exploit EPSS 100%

    A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message…

    Exim Exim exim4 exim4 Debian Ubuntu Alpine
    KEV Jan 10, 2022

References

  • report
    https://ubuntu.com/security/CVE-2019-10149