Known vulnerabilities in exim4 (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:exim4_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 22
Public exploits: 5
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting exim4 (Ubuntu package) exim4 (Ubuntu package) is affected by 22 known vulnerabilities: 4 critical, 5 high, 8 medium, 5 low Critical High Medium Low

Vulnerabilities (22)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139246 - Improper Privilege Management
CWE-269 Low
No
No
4.95-4ubuntu2.11, 4.97-4ubuntu4.7, 4.99.1-1ubuntu1.4 23.07.2026 SB2026072371
SB20260727239
#VU139245 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22 Low
No
No
4.95-4ubuntu2.11, 4.97-4ubuntu4.7, 4.99.1-1ubuntu1.4 23.07.2026 SB2026072371
SB20260727239
#VU133143 - Use of Uninitialized Variable
CVE-2026-48840
CWE-457 Medium
No
No
4.82-3ubuntu2.4+esm9, 4.86.2-2ubuntu2.6+esm9, 4.90.1-1ubuntu1.10+esm6, 4.93-13ubuntu1.12+esm1, 4.95-4ubuntu2.9, 4.97-4ubuntu4.6, 4.98.2-1ubuntu2.3, 4.99.1-1ubuntu1.3 01.06.2026 SB2026060173
SB2026060176
SB2026060183
and 5 more
#VU131337 - Use After Free
CVE-2026-45185
CWE-416 Critical
No
No
4.82-3ubuntu2.4+esm9, 4.86.2-2ubuntu2.6+esm9, 4.90.1-1ubuntu1.10+esm6, 4.93-13ubuntu1.12+esm1 13.05.2026 SB2026051365
SB2026060607
SB2026081405
#VU130455 - Out-of-bounds write
CVE-2026-40685
CWE-787 Medium
No
No
4.82-3ubuntu2.4+esm9, 4.86.2-2ubuntu2.6+esm9, 4.90.1-1ubuntu1.10+esm6, 4.93-13ubuntu1.12+esm1, 4.95-4ubuntu2.7, 4.97-4ubuntu4.4, 4.98.2-1ubuntu2.1, 4.99.1-1ubuntu1.1 07.05.2026 SB2026050764
SB2026050766
SB2026051417
and 2 more
#VU130456 - Out-of-bounds read
CVE-2026-40686
CWE-125 Medium
No
No
4.82-3ubuntu2.4+esm9, 4.86.2-2ubuntu2.6+esm9, 4.90.1-1ubuntu1.10+esm6, 4.93-13ubuntu1.12+esm1, 4.95-4ubuntu2.7, 4.97-4ubuntu4.4, 4.98.2-1ubuntu2.1, 4.99.1-1ubuntu1.1 07.05.2026 SB2026050764
SB2026050766
SB2026051417
and 2 more
#VU130457 - Out-of-bounds write
CVE-2026-40687
CWE-787 Medium
No
No
4.82-3ubuntu2.4+esm9, 4.86.2-2ubuntu2.6+esm9, 4.90.1-1ubuntu1.10+esm6, 4.93-13ubuntu1.12+esm1, 4.95-4ubuntu2.7, 4.97-4ubuntu4.4, 4.98.2-1ubuntu2.1, 4.99.1-1ubuntu1.1 07.05.2026 SB2026050764
SB2026050766
SB2026051417
and 2 more
#VU106059 - Use After Free
CVE-2025-30232
CWE-416 Low
No
No
4.97-4ubuntu4.3, 4.98-1ubuntu2.1 26.03.2025 SB2025032646
SB2025032653
SB2025032654
and 7 more
#VU94107 - Improper input validation
CVE-2024-39929
CWE-20 Medium
Available
No
Ubuntu Pro, 4.93-13ubuntu1.12, 4.95-4ubuntu2.6, 4.97-4ubuntu4.1 11.07.2024 SB2024071120
SB20240711141
SB2024080101
and 10 more
#VU84728 - Command injection
CVE-2023-51766
CWE-77 Medium
No
No
Ubuntu Pro, 4.82-3ubuntu2.4+esm9, 4.86.2-2ubuntu2.6+esm9, 4.90.1-1ubuntu1.10+esm6, 4.93-13ubuntu1.10, 4.93-13ubuntu1.12+esm1, 4.95-4ubuntu2.5, 4.96-17ubuntu2.2 24.12.2023 SB2023122404
SB2024010334
SB2024010335
and 11 more
#VU81256 - Out-of-bounds read
CVE-2023-42119
CWE-125 Low
No
No
4.95-4ubuntu2.10 28.09.2023 SB2023092821
SB2023100243
SB2023100244
and 9 more
#VU81254 - Memory corruption
CVE-2023-42117
CWE-119 Critical
No
No
4.95-4ubuntu2.10 28.09.2023 SB2023092821
SB2023100243
SB2023100244
and 10 more
#VU81253 - Stack-based buffer overflow
CVE-2023-42116
CWE-121 Critical
No
No
Ubuntu Pro, 4.93-13ubuntu1.8, 4.95-4ubuntu2.3, 4.96-14ubuntu1.2 28.09.2023 SB2023092821
SB2023100243
SB2023100244
and 10 more
#VU81252 - Out-of-bounds write
CVE-2023-42115
CWE-787 Critical
Available
No
Ubuntu Pro, 4.93-13ubuntu1.8, 4.95-4ubuntu2.3, 4.96-14ubuntu1.2 28.09.2023 SB2023092821
SB2023100243
SB2023100244
and 8 more
#VU81251 - Out-of-bounds read
CVE-2023-42114
CWE-125 Low
No
No
Ubuntu Pro, 4.93-13ubuntu1.8, 4.95-4ubuntu2.3, 4.96-14ubuntu1.2 28.09.2023 SB2023092821
SB2023100243
SB2023100244
and 9 more
#VU73857 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2021-38371
CWE-300 Medium
No
No
Ubuntu Pro, 4.93-13ubuntu1.11 20.03.2023 SB2022082219
SB2023040605
SB2024071024
and 2 more
#VU27959 - Out-of-bounds read
CVE-2020-12783
CWE-125 Medium
No
No
4.86.2-2ubuntu2.6, 4.90.1-1ubuntu1.5, 4.92.1-1ubuntu3.1, 4.93-13ubuntu1.1 18.05.2020 SB2020051804
SB2020051805
SB2020052108
and 7 more
#VU21399 - Heap-based Buffer Overflow
CVE-2019-16928
CWE-122 High
No
Exploited
4.92-4ubuntu1.4 28.09.2019 SB2019092805
SB2019092806
SB2019092807
and 11 more
#VU20924 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-15846
CWE-78 High
Available
No
4.86.2-2ubuntu2.5, 4.90.1-1ubuntu1.4, 4.92-4ubuntu1.3 06.09.2019 SB2019090614
SB2019090615
SB2019090616
and 11 more
#VU18686 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-10149
CWE-78 High
Available
Exploited
4.90.1-1ubuntu1.2, 4.91-6ubuntu1.1 05.06.2019 SB2019060505
SB2019060506
SB2019060601
and 4 more


Showing elements 1 - 20 out of 22