exim4 vulnerabilities

Summary

Fixed packages 2

Vulnerabilities 20

• Unscored —
  CVE-2020-28007

  Exim 4 before 4.94.2 allows Execution with Unnecessary Privileges. Because Exim operates as root in the log directory (…

  exim4 exim4 exim Debian Ubuntu Alpine
  May 6, 2021
• Unscored —
  CVE-2020-28008

  Exim 4 before 4.94.2 allows Execution with Unnecessary Privileges. Because Exim operates as root in the spool directory…

  exim4 exim4 exim Debian Ubuntu Alpine
  May 6, 2021
• Unscored —
  CVE-2020-28009

  Exim 4 before 4.94.2 allows Integer Overflow to Buffer Overflow because get_stdinput allows unbounded reads that are ac…

  exim4 exim4 exim Debian Ubuntu Alpine
  May 6, 2021
• Unscored —
  CVE-2020-28010

  Exim 4 before 4.94.2 allows Out-of-bounds Write because the main function, while setuid root, copies the current workin…

  exim4 exim4 exim Debian Ubuntu Alpine
  May 6, 2021
• Unscored —
  CVE-2020-28011

  Exim 4 before 4.94.2 allows Heap-based Buffer Overflow in queue_run via two sender options: -R and -S. This may cause p…

  exim4 exim4 exim Debian Ubuntu Alpine
  May 6, 2021
• Unscored —
  CVE-2020-28012

  Exim 4 before 4.94.2 allows Exposure of File Descriptor to Unintended Control Sphere because rda_interpret uses a privi…

  exim4 exim4 exim Debian Ubuntu Alpine
  May 6, 2021
• Unscored —
  CVE-2020-28013

  Exim 4 before 4.94.2 allows Heap-based Buffer Overflow because it mishandles "-F '.('" on the command line, and thus ma…

  exim4 exim4 exim Debian Ubuntu Alpine
  May 6, 2021
• Unscored —
  CVE-2020-28014

  Exim 4 before 4.94.2 allows Execution with Unnecessary Privileges. The -oP option is available to the exim user, and al…

  exim4 exim4 exim Debian Ubuntu Alpine
  May 6, 2021
• Unscored —
  CVE-2020-28015

  Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters. Local users can alter the behavior of root process…

  exim4 exim4 exim Debian Ubuntu Alpine
  May 6, 2021
• Unscored —
  CVE-2020-28017 EPSS 37%

  Exim 4 before 4.94.2 allows Integer Overflow to Buffer Overflow in receive_add_recipient via an e-mail message with fif…

  exim4 exim4 exim Debian Ubuntu Alpine
  May 6, 2021
• Unscored —
  CVE-2020-28018 Public exploit EPSS 56%

  Exim 4 before 4.94.2 allows Use After Free in smtp_reset in certain situations that may be common for builds with OpenS…

  exim4 exim4 exim Debian Ubuntu Alpine
  May 6, 2021
• Unscored —
  CVE-2020-28019 EPSS 62%

  Exim 4 before 4.94.2 has Improper Initialization that can lead to recursion-based stack consumption or other consequenc…

  exim4 exim4 exim Debian Ubuntu Alpine
  May 6, 2021
• Unscored —
  CVE-2020-28020

  Exim 4 before 4.92 allows Integer Overflow to Buffer Overflow, in which an unauthenticated remote attacker can execute …

  exim4 exim4 exim Debian Ubuntu Alpine
  May 6, 2021
• Unscored —
  CVE-2020-28021

  Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters. An authenticated remote SMTP client can insert new…

  exim4 exim4 exim Debian Ubuntu Alpine
  May 6, 2021
• Unscored —
  CVE-2020-28022 Public exploit

  Exim 4 before 4.94.2 has Improper Restriction of Write Operations within the Bounds of a Memory Buffer. This occurs whe…

  exim4 exim4 exim Debian Ubuntu Alpine
  May 6, 2021
• Unscored —
  CVE-2020-28023

  Exim 4 before 4.94.2 allows Out-of-bounds Read. smtp_setup_msg may disclose sensitive information from process memory t…

  exim4 exim4 exim Debian Ubuntu Alpine
  May 6, 2021
• Unscored —
  CVE-2020-28024

  Exim 4 before 4.94.2 allows Buffer Underwrite that may result in unauthenticated remote attackers executing arbitrary c…

  exim4 exim4 exim Debian Ubuntu Alpine
  May 6, 2021
• Unscored —
  CVE-2020-28025

  Exim 4 before 4.94.2 allows Out-of-bounds Read because pdkim_finish_bodyhash does not validate the relationship between…

  exim4 exim4 exim Debian Ubuntu Alpine
  May 6, 2021
• Unscored —
  CVE-2020-28026

  Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters, relevant in non-default configurations that enable…

  exim4 exim4 exim Debian Ubuntu Alpine
  May 6, 2021
• Unscored —
  CVE-2021-27216

  Exim 4 before 4.94.2 has Execution with Unnecessary Privileges. By leveraging a delete_pid_file race condition, a local…

  exim4 exim4 exim Debian Ubuntu Alpine
  May 6, 2021

References

• report
  https://ubuntu.com/security/CVE-2020-28007
• report
  https://ubuntu.com/security/CVE-2020-28008
• report
  https://ubuntu.com/security/CVE-2020-28009
• report
  https://ubuntu.com/security/CVE-2020-28010
• report
  https://ubuntu.com/security/CVE-2020-28011
• report
  https://ubuntu.com/security/CVE-2020-28012
• report
  https://ubuntu.com/security/CVE-2020-28013
• report
  https://ubuntu.com/security/CVE-2020-28014
• report
  https://ubuntu.com/security/CVE-2020-28015
• report
  https://ubuntu.com/security/CVE-2020-28016
• report
  https://ubuntu.com/security/CVE-2020-28017
• report
  https://ubuntu.com/security/CVE-2020-28018
• report
  https://ubuntu.com/security/CVE-2020-28019
• report
  https://ubuntu.com/security/CVE-2020-28020
• report
  https://ubuntu.com/security/CVE-2020-28021
• report
  https://ubuntu.com/security/CVE-2020-28022
• report
  https://ubuntu.com/security/CVE-2020-28023
• report
  https://ubuntu.com/security/CVE-2020-28024
• report
  https://ubuntu.com/security/CVE-2020-28025
• report
  https://ubuntu.com/security/CVE-2020-28026
• report
  https://ubuntu.com/security/CVE-2021-27216