Skip to content
OpenAdvisories
Unscored USN-5574-1 1 CVE

exim4 vulnerability

Published Aug 22, 2022 · Updated Jun 29, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Exim incorrectly handled certain inputs.
An attacker could possibly use this issue to cause a crash or
execute arbitrary code.

Fixed packages 4

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS exim4 4.90.1-1ubuntu1.9
Ubuntu · 20.04 LTS 20.04:LTS exim4 4.93-13ubuntu1.6
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS exim4 4.82-3ubuntu2.4+esm4
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS exim4 4.86.2-2ubuntu2.6+esm2

Vulnerabilities 1

  • Unscored —
    CVE-2022-37452

    Exim before 4.95 has a heap-based buffer overflow for the alias list in host_name_lookup in host.c when sender_host_nam…

    exim4 exim4 Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2022-37452