Medium WID-SEC-2026-3475 4 CVEs

Exim: Mehrere Schwachstellen

Published Sep 20, 2026 · Updated Oct 6, 2026 · Revision 4 · de-DE

Vendor: cPanel Vendor: Debian Vendor: Fedora Vendor: Ubuntu Product: cPanel/WHM Product: Linux Product: Linux Product: Linux Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Exim ausnutzen, um Sicherheitsvorkehrungen zu umgehen, den Speicher zu beschädigen, einen Denial-of-Service-Zustand herbeizuführen oder Daten offenzulegen und zu manipulieren.

Product

Exim (EXperimental Internet Mailer) ist ein Mailserver und Mail Transfer Agent.

Vulnerabilities 4

High 7.5

CVE-2026-94056

Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain un…

Exim Exim exim4 exim4 Debian Ubuntu

Sep 19, 2026
High 7.0

CVE-2026-94054

Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write.

Exim Exim exim4 exim4 Debian Ubuntu

Sep 19, 2026
Medium 4.0

CVE-2026-94057

Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead de…

Exim Exim exim4 exim4 Debian Ubuntu

Sep 19, 2026
Low 3.7

CVE-2026-94055

Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free.

Exim Exim exim4 exim4 Debian Ubuntu

Sep 19, 2026

Revision history

2026-10-06 #4
Neue Updates von Fedora aufgenommen
2026-09-28 #3
Neue Updates von Ubuntu und Debian aufgenommen
2026-09-23 #2
Neue Updates aufgenommen
2026-09-20 #1
Initiale Fassung

References

Exim Security Release 4.100.1 vom 2026-09-20
https://lists.exim.org/lurker/message/20260918.121220.0f87338e.en.html
GitHub Security Advisory GHSA-r24f-7cqq-88w4 vom 2026-09-20
https://github.com/advisories/GHSA-r24f-7cqq-88w4
cPanel & WHM Change Log vom 2026-09-24
https://docs.cpanel.net/changelogs/110-change-log/
cPanel & WHM Change Log vom 2026-09-24
https://docs.cpanel.net/changelogs/134-change-log/
cPanel & WHM Change Log vom 2026-09-24
https://docs.cpanel.net/changelogs/138-change-log/
cPanel & WHM Change Log vom 2026-09-24
https://docs.cpanel.net/changelogs/136-change-log/
Ubuntu Security Notice USN-8834-1 vom 2026-09-28
https://ubuntu.com/security/notices/USN-8834-1
Debian Security Advisory DSA-6522 vom 2026-09-28
https://security-tracker.debian.org/tracker/DSA-6522-1
Fedora Security Advisory FEDORA-2026-D202B74C6A vom 2026-10-06
https://bodhi.fedoraproject.org/updates/FEDORA-2026-d202b74c6a
Fedora Security Advisory FEDORA-EPEL-2026-15B5988543 vom 2026-10-06
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-15b5988543
Fedora Security Advisory FEDORA-EPEL-2026-61A5EA9FCD vom 2026-10-06
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-61a5ea9fcd
Fedora Security Advisory FEDORA-2026-3F88DDBD83 vom 2026-10-06
https://bodhi.fedoraproject.org/updates/FEDORA-2026-3f88ddbd83
Fedora Security Advisory FEDORA-2026-4F9E436ED5 vom 2026-10-06
https://bodhi.fedoraproject.org/updates/FEDORA-2026-4f9e436ed5
Fedora Security Advisory FEDORA-EPEL-2026-71B80F48FA vom 2026-10-06
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-71b80f48fa