Skip to content
OpenAdvisories
Medium USN-5741-1 1 CVE

exim4 vulnerability

Published Nov 24, 2022 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Exim incorrectly handled certain regular
expressions. An attacker could use this issue to cause Exim to crash,
resulting in a denial of service, or possibly execute arbitrary code.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS exim4 4.90.1-1ubuntu1.10
Ubuntu · 20.04 LTS 20.04:LTS exim4 4.93-13ubuntu1.7
Ubuntu · 22.04 LTS 22.04:LTS exim4 4.95-4ubuntu2.2

Vulnerabilities 1

  • Medium 4.6
    CVE-2022-3559

    Exim Regex use after free

    A vulnerability was found in Exim and classified as problematic. This issue affects some unknown processing of the component Regex Handler. The manipulation leads to use after free. The name of the patch is 4e9ed49f8f12eb331b29bd5b6dc3693c520fddc2. It is reco…

    exim4 exim4 Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2022-3559