Skip to content
OpenAdvisories
Unscored USN-8270-1 0 CVEs

exim4 vulnerability

Published May 12, 2026 · Updated May 20, 2026

Summary

It was discovered that Exim incorrectly handled BDAT body parsing. A remote
attacker could use this issue to cause Exim to crash, resulting in a denial
of service, or possibly execute arbitrary code.

Fixed packages 4

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS exim4 4.95-4ubuntu2.8
Ubuntu · 24.04 LTS 24.04:LTS exim4 4.97-4ubuntu4.5
Ubuntu · 25.10 exim4 4.98.2-1ubuntu2.2
Ubuntu · 26.04 LTS 26.04:LTS exim4 4.99.1-1ubuntu1.2

References

  • report
    https://launchpad.net/bugs/2152202