CVE-2020-28020

Exim 4 before 4.92 allows Integer Overflow to Buffer Overflow, in which an unauthenticated remote attacker can execute arbitrary code by leveraging the mishandling of continuation lines during header-length restriction.

Affected products

Exim, Linuxmint, Suse, Ubuntu

Exim

< 4.92

Fix

Available

CVSS 3.1

9.8 CRITICAL

EPSS

7.9% (94th percentile)

Weakness

CWE-190

NVD status

Modified

Published

2021-05-06