CVE-2020-28018

Exim 4 before 4.94.2 allows Use After Free in smtp_reset in certain situations that may be common for builds with OpenSSL.

Affected products

Alt Linux, Astra Linux, Exim 4, Linuxmint, Openssl, Suse, Ubuntu

Exim

< 4.94.2

Fix

Available

CVSS 3.1

9.8 CRITICAL

EPSS

56.8% (99th percentile)

Weakness

CWE-416

NVD status

Modified

Published

2021-05-06