CVE-2020-12783

Exim through 4.93 has an out-of-bounds read in the SPA authenticator that could result in SPA/NTLM authentication bypass in auths/spa.c and auths/auth-spa.c.

Affected products

Alt Linux, Astra Linux, Exim, Linuxmint, Suse, Ubuntu

Exim

≤ 4.93

Fix

Available

CVSS 3.1

7.5 HIGH

EPSS

4.6% (91th percentile)

Weakness

CWE-125

NVD status

Modified

Published

2020-05-11