CVE-2020-28017

Exim 4 before 4.94.2 allows Integer Overflow to Buffer Overflow in receive_add_recipient via an e-mail message with fifty million recipients. NOTE: remote exploitation may be difficult because of resource consumption.

Affected products

Alt Linux, Astra Linux, Exim, Linuxmint, Suse, Ubuntu

Exim

< 4.94.1

Fix

Available

CVSS 3.1

9.8 CRITICAL

EPSS

36.9% (98th percentile)

Weakness

CWE-190

NVD status

Modified

Published

2021-05-06