CVE-2022-37451

Exim before 4.96 has an invalid free in pam_converse in auths/call_pam.c because store_free is not used after store_malloc.

Affected products

Alt Linux, Exim

Exim

< 4.96

Fix

Available

CVSS 3.1

7.5 HIGH

EPSS

3.3% (87th percentile)

Weakness

CWE-763

NVD status

Modified

Published

2022-08-06