Known vulnerabilities in exim

Software: exim
Software CPE: cpe:2.3:o:fedoraproject:exim:*:*:*:*:*:fedora:*:*
Total vulnerabilities: 32
Public exploits: 7
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting exim exim is affected by 32 known vulnerabilities: 3 critical, 5 high, 14 medium, 10 low Critical High Medium Low

Vulnerabilities (32)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU152755 - Out-of-bounds write
CVE-2026-94054
CWE-787 Low
No
No
4.100.1-1.el8, 4.100.1-1.el9, 4.100.1-1.el10_4, 4.100.1-1.fc43 29.09.2026 SB2026092936
SB2026092938
SB2026093002
and 4 more
#VU152756 - Use After Free
CVE-2026-94055
CWE-416 Medium
No
No
4.100.1-1.el8, 4.100.1-1.el9, 4.100.1-1.el10_4, 4.100.1-1.fc43 29.09.2026 SB2026092936
SB2026093002
SB2026100648
and 3 more
#VU152757 - Use of Uninitialized Variable
CVE-2026-94056
CWE-457 Low
No
No
4.100.1-1.el8, 4.100.1-1.el9, 4.100.1-1.el10_4, 4.100.1-1.fc43 29.09.2026 SB2026092936
SB2026092938
SB2026093002
and 4 more
#VU152758 - Improper input validation
CVE-2026-94057
CWE-20 Low
No
No
4.100.1-1.el8, 4.100.1-1.el9, 4.100.1-1.el10_4, 4.100.1-1.fc43 29.09.2026 SB2026092936
SB2026092938
SB2026093002
and 4 more
#VU133143 - Use of Uninitialized Variable
CVE-2026-48840
CWE-457 Medium
No
No
4.99.4-1.el8, 4.99.4-1.el9, 4.99.4-1.el10_3, 4.99.4-1.fc43 01.06.2026 SB2026060173
SB2026060176
SB2026060183
and 5 more
#VU106059 - Use After Free
CVE-2025-30232
CWE-416 Low
No
No
4.98.2-1.el8, 4.98.2-1.el9, 4.98.2-1.fc40, 4.98.2-1.fc41, 4.98.2-1.fc42 26.03.2025 SB2025032646
SB2025032653
SB2025032654
and 7 more
#VU104137 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-26794
CWE-89 Medium
Available
No
4.98.1-1.el8, 4.98.1-1.el9, 4.98.1-1.fc40, 4.98.1-1.fc41, 4.98.1-1.fc42, 4.98.2-1.fc42 21.02.2025 SB2025022136
SB2025022446
SB2025022447
and 4 more
#VU94107 - Improper input validation
CVE-2024-39929
CWE-20 Medium
Available
No
4.98-1.el8, 4.98-1.el9, 4.98-1.fc39, 4.98-1.fc40, 4.98-2.el8 11.07.2024 SB2024071120
SB20240711141
SB2024080101
and 10 more
#VU84728 - Command injection
CVE-2023-51766
CWE-77 Medium
No
No
4.97.1-1.el7, 4.97.1-1.el8, 4.97.1-1.el9, 4.97.1-1.fc38, 4.97.1-1.fc39 24.12.2023 SB2023122404
SB2024010334
SB2024010335
and 11 more
#VU81256 - Out-of-bounds read
CVE-2023-42119
CWE-125 Low
No
No
4.96.1-1.el7, 4.96.1-1.el8, 4.96.1-1.el9, 4.96.1-1.fc37, 4.96.1-1.fc38, 4.96.1-1.fc39, 4.96.1-1.fc40 28.09.2023 SB2023092821
SB2023100243
SB2023100244
and 9 more
#VU81254 - Memory corruption
CVE-2023-42117
CWE-119 Critical
No
No
4.96.1-1.el7, 4.96.1-1.el8, 4.96.1-1.el9, 4.96.1-1.fc37, 4.96.1-1.fc38, 4.96.1-1.fc39, 4.96.1-1.fc40 28.09.2023 SB2023092821
SB2023100243
SB2023100244
and 10 more
#VU81253 - Stack-based buffer overflow
CVE-2023-42116
CWE-121 Critical
No
No
4.96.1-1.el7, 4.96.1-1.el8, 4.96.1-1.el9, 4.96.1-1.fc37, 4.96.1-1.fc38, 4.96.1-1.fc39, 4.96.1-1.fc40 28.09.2023 SB2023092821
SB2023100243
SB2023100244
and 10 more
#VU81252 - Out-of-bounds write
CVE-2023-42115
CWE-787 Critical
Available
No
4.96.1-1.el7, 4.96.1-1.el8, 4.96.1-1.el9, 4.96.1-1.fc37, 4.96.1-1.fc38, 4.96.1-1.fc39, 4.96.1-1.fc40 28.09.2023 SB2023092821
SB2023100243
SB2023100244
and 8 more
#VU81251 - Out-of-bounds read
CVE-2023-42114
CWE-125 Low
No
No
4.96.1-1.el7, 4.96.1-1.el8, 4.96.1-1.el9, 4.96.1-1.fc37, 4.96.1-1.fc38, 4.96.1-1.fc39, 4.96.1-1.fc40 28.09.2023 SB2023092821
SB2023100243
SB2023100244
and 9 more
#VU73857 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2021-38371
CWE-300 Medium
No
No
4.95-1.el8 20.03.2023 SB2022082219
SB2023040605
SB2024071024
and 2 more
#VU69579 - Use After Free
CVE-2022-3559
CWE-416 Medium
No
No
4.96-3.el7, 4.96-3.el8, 4.96-3.el9, 4.96-4.fc35, 4.96-4.fc36, 4.96-4.fc37 24.11.2022 SB2022112417
SB2022112418
SB2023012474
and 9 more
#VU66692 - Release of invalid pointer or reference
CVE-2022-37451
CWE-763 Medium
No
No
4.96-2.fc35, 4.96-2.fc36 22.08.2022 SB2022082220
SB2023060672
SB2022083041
and 1 more
#VU27959 - Out-of-bounds read
CVE-2020-12783
CWE-125 Medium
No
No
4.92.3-2.el6, 4.93-3.el7, 4.93-3.el8, 4.93-8.fc31, 4.93-8.fc32 18.05.2020 SB2020051804
SB2020051805
SB2020052108
and 7 more
#VU21399 - Heap-based Buffer Overflow
CVE-2019-16928
CWE-122 High
No
Exploited
4.92.3-1.el6, 4.92.3-1.el7, 4.92.3-1.fc29, 4.92.3-1.fc30, 4.92.3-1.fc31 28.09.2019 SB2019092805
SB2019092806
SB2019092807
and 11 more
#VU20924 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-15846
CWE-78 High
Available
No
4.92.2-1.el6, 4.92.2-1.el7, 4.92.2-1.fc29, 4.92.2-1.fc30, 4.92.2-1.fc31 06.09.2019 SB2019090614
SB2019090615
SB2019090616
and 11 more


Showing elements 1 - 20 out of 32