Known vulnerabilities in exim4 (Debian package)

Vendor: Debian
Software CPE: cpe:2.3:o:debian:exim4_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 33
Public exploits: 4
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting exim4 (Debian package) exim4 (Debian package) is affected by 33 known vulnerabilities: 2 critical, 7 high, 13 medium, 11 low Critical High Medium Low

Vulnerabilities (33)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU133143 - Use of Uninitialized Variable
CVE-2026-48840
CWE-457 Medium
No
No
4.96-15+deb12u10, 4.98.2-1+deb13u3 01.06.2026 SB2026060173
SB2026060176
SB2026060183
and 5 more
#VU130454 - Improper input validation
CVE-2026-40684
CWE-20 Medium
No
No
4.96-15+deb12u9, 4.98.2-1+deb13u2 07.05.2026 SB2026050764
SB2026051417
SB2026081405
#VU130455 - Out-of-bounds write
CVE-2026-40685
CWE-787 Medium
No
No
4.96-15+deb12u9, 4.98.2-1+deb13u2 07.05.2026 SB2026050764
SB2026050766
SB2026051417
and 2 more
#VU130456 - Out-of-bounds read
CVE-2026-40686
CWE-125 Medium
No
No
4.96-15+deb12u9, 4.98.2-1+deb13u2 07.05.2026 SB2026050764
SB2026050766
SB2026051417
and 2 more
#VU130457 - Out-of-bounds write
CVE-2026-40687
CWE-787 Medium
No
No
4.96-15+deb12u9, 4.98.2-1+deb13u2 07.05.2026 SB2026050764
SB2026050766
SB2026051417
and 2 more
#VU106059 - Use After Free
CVE-2025-30232
CWE-416 Low
No
No
4.96-15+deb12u7 26.03.2025 SB2025032646
SB2025032653
SB2025032654
and 7 more
#VU94107 - Improper input validation
CVE-2024-39929
CWE-20 Medium
Available
No
4.94.2-7+deb11u3, 4.96-15+deb12u5 11.07.2024 SB2024071120
SB20240711141
SB2024080101
and 10 more
#VU84728 - Command injection
CVE-2023-51766
CWE-77 Medium
No
No
4.94.2-7+deb11u2, 4.96-15+deb12u4 24.12.2023 SB2023122404
SB2024010334
SB2024010335
and 11 more
#VU81253 - Stack-based buffer overflow
CVE-2023-42116
CWE-121 Critical
No
No
4.94.2-7+deb11u1, 4.96-15+deb12u2 28.09.2023 SB2023092821
SB2023100243
SB2023100244
and 10 more
#VU81252 - Out-of-bounds write
CVE-2023-42115
CWE-787 Critical
Available
No
4.94.2-7+deb11u1, 4.96-15+deb12u2 28.09.2023 SB2023092821
SB2023100243
SB2023100244
and 8 more
#VU81251 - Out-of-bounds read
CVE-2023-42114
CWE-125 Low
No
No
4.94.2-7+deb11u1, 4.96-15+deb12u2 28.09.2023 SB2023092821
SB2023100243
SB2023100244
and 9 more
#VU52872 - Out-of-bounds read
CVE-2020-28025
CWE-125 Medium
No
No
4.92-8+deb10u6 04.05.2021 SB2021050419
SB2021050420
SB2021050421
and 3 more
#VU52870 - Integer underflow
CVE-2020-28024
CWE-191 High
No
No
4.92-8+deb10u6 04.05.2021 SB2021050419
SB2021050420
SB2021050421
and 3 more
#VU52869 - Resource Management Errors
CVE-2020-28019
CWE-399 Medium
No
No
4.92-8+deb10u6 04.05.2021 SB2021050419
SB2021050420
SB2021050421
and 2 more
#VU52868 - Improper input validation
CVE-2020-28026
CWE-20 Medium
No
No
4.92-8+deb10u6 04.05.2021 SB2021050419
SB2021050420
SB2021050421
and 3 more
#VU52865 - Out-of-bounds read
CVE-2020-28023
CWE-125 Medium
No
No
4.92-8+deb10u6 04.05.2021 SB2021050419
SB2021050420
SB2021050421
and 2 more
#VU52862 - Integer overflow
CVE-2020-28009
CWE-190 Low
No
No
4.92-8+deb10u6 04.05.2021 SB2021050419
SB2021050420
SB2021050421
and 3 more
#VU52860 - Improper input validation
CVE-2020-28015
CWE-20 Low
No
No
4.92-8+deb10u6 04.05.2021 SB2021050419
SB2021050420
SB2021050421
and 3 more
#VU52857 - Out-of-bounds write
CVE-2020-28010
CWE-787 Low
No
No
4.92-8+deb10u6 04.05.2021 SB2021050419
SB2021050420
SB2021050421
and 2 more
#VU52853 - UNIX Symbolic Link (Symlink) Following
CVE-2020-28007
CWE-61 Low
No
No
4.92-8+deb10u6 04.05.2021 SB2021050419
SB2021050420
SB2021050421
and 3 more


Showing elements 1 - 20 out of 33