CVE-2022-37452
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 3.8%
Exim before 4.95 has a heap-based buffer overflow for the alias list in host_name_lookup in host.c when sender_host_name is set.
Produtos afetados
n/a · n/aReferências
https://github.com/Exim/exim/commit/d4bc023436e4cce7c23c5f8bb5199e178b4cc743https://github.com/Exim/exim/compare/exim-4.94...exim-4.95https://github.com/Exim/exim/wiki/EximSecurityhttps://github.com/ivd38/exim_overflowhttps://lists.debian.org/debian-lts-announce/2022/08/msg00014.htmlhttps://www.exim.org/static/doc/security/https://www.openwall.com/lists/oss-security/2022/08/06/8