Known vulnerabilities in exim
Vendor:
Fedoraproject
Software:
exim
Software CPE:
cpe:2.3:o:fedoraproject:exim:*:*:*:*:*:fedora:*:*
Website:
https://getfedora.org/
Total vulnerabilities:
32
Public exploits:
7
Known exploited (KEV):
3
Breakdown by Severity Chart
4.100.1-1.el8
4.100.1-1.el9
4.100.1-1.el10_4
4.100.1-1.fc43
4.99.5-1.el8
4.99.5-1.el9
4.99.5-1.el10_3
4.99.4-2.fc45
4.99.4-1.el8
4.99.4-1.el9
4.99.4-1.el10_3
4.99.4-1.fc43
4.99.2-1.el9
4.99.2-1.el8
4.99.2-1.el10_3
4.99.2-1.fc42
4.99.2-1.fc43
4.99.2-1.fc44
4.92.3-2.el6
4.93-3.el7
4.93-3.el8
4.93-8.fc31
4.93-8.fc32
4.92.3-1.el6
4.92.3-1.el7
4.92.3-1.fc29
4.92.3-1.fc30
4.92.3-1.fc31
4.92.2-1.el7
4.92.2-1.el6
4.92.2-1.fc29
4.92.2-1.fc30
4.92.2-1.fc31
4.90.1-3.el7
4.90.1-3.el6
4.90.1-3.fc26
4.90.1-3.fc27
4.90.1-4.fc28
4.90.1-2.fc26
4.90.1-2.fc27
4.90.1-2.el7
4.90.1-2.el6
4.90.1-1.el6
4.90.1-1.el7
4.90.1-1.fc26
4.90.1-1.fc27
4.89-4.el6
4.89-4.el7
4.89-7.fc26
4.89-7.fc27
4.89-3.el7
4.89-6.fc26
4.89-3.el6
4.89-6.fc27
4.89-2.el6
4.89-2.el7
4.89-5.fc26
4.88-2.el6
4.88-3.el7
4.88-1.el6
4.88-2.el7
4.87.1-1.fc24
4.87.1-1.fc25
4.84.2-1.el6
4.84.2-1.el7
4.85.2-1.fc22
4.86.2-1.fc23
4.72-6.el6
4.72-4.el6
4.72-3.el6
4.72-2.el6
4.98.2-1.el8
4.98.2-1.el9
4.98.2-1.fc40
4.98.2-1.fc41
4.98.2-1.fc42
4.98.1-1.fc42
4.98.1-1.el8
4.98.1-1.el9
4.98.1-1.fc40
4.98.1-1.fc41
4.96-4.el7
4.96-4.el8
4.96-4.el9
4.96-5.fc35
4.96-5.fc36
4.96-5.fc37
4.96-3.el7
4.96-3.el8
4.96-3.el9
4.96-4.fc35
4.96-4.fc36
4.96-4.fc37
4.96-2.fc35
4.96-2.fc36
4.95-1.el8
4.94.2-1.el7
4.94.2-1.el8
4.94.2-1.fc34
4.94-2.el7
4.94-2.el8
4.94-2.fc32
4.94-7.fc33
4.94-7.fc34
4.98-2.el8
4.98-1.el8
4.98-1.el9
4.98-1.fc39
4.98-1.fc40
4.97.1-1.el8
4.97.1-1.el7
4.97.1-1.el9
4.97.1-1.fc38
4.97.1-1.fc39
4.96.1-1.el7
4.96.1-1.el8
4.96.1-1.el9
4.96.1-1.fc37
4.96.1-1.fc38
4.96.1-1.fc39
4.96.1-1.fc40
Vulnerabilities (32)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU152755 - Out-of-bounds write CVE-2026-94054 |
CWE-787 | Low | 4.100.1-1.el8, 4.100.1-1.el9, 4.100.1-1.el10_4, 4.100.1-1.fc43 | 29.09.2026 |
SB2026092936 SB2026092938 SB2026093002 and 4 more |
||
| #VU152756 - Use After Free CVE-2026-94055 |
CWE-416 | Medium | 4.100.1-1.el8, 4.100.1-1.el9, 4.100.1-1.el10_4, 4.100.1-1.fc43 | 29.09.2026 |
SB2026092936 SB2026093002 SB2026100648 and 3 more |
||
| #VU152757 - Use of Uninitialized Variable CVE-2026-94056 |
CWE-457 | Low | 4.100.1-1.el8, 4.100.1-1.el9, 4.100.1-1.el10_4, 4.100.1-1.fc43 | 29.09.2026 |
SB2026092936 SB2026092938 SB2026093002 and 4 more |
||
| #VU152758 - Improper input validation CVE-2026-94057 |
CWE-20 | Low | 4.100.1-1.el8, 4.100.1-1.el9, 4.100.1-1.el10_4, 4.100.1-1.fc43 | 29.09.2026 |
SB2026092936 SB2026092938 SB2026093002 and 4 more |
||
| #VU133143 - Use of Uninitialized Variable CVE-2026-48840 |
CWE-457 | Medium | 4.99.4-1.el8, 4.99.4-1.el9, 4.99.4-1.el10_3, 4.99.4-1.fc43 | 01.06.2026 |
SB2026060173 SB2026060176 SB2026060183 and 5 more |
||
| #VU106059 - Use After Free CVE-2025-30232 |
CWE-416 | Low | 4.98.2-1.el8, 4.98.2-1.el9, 4.98.2-1.fc40, 4.98.2-1.fc41, 4.98.2-1.fc42 | 26.03.2025 |
SB2025032646 SB2025032653 SB2025032654 and 7 more |
||
| #VU104137 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2025-26794 |
CWE-89 | Medium | 4.98.1-1.el8, 4.98.1-1.el9, 4.98.1-1.fc40, 4.98.1-1.fc41, 4.98.1-1.fc42, 4.98.2-1.fc42 | 21.02.2025 |
SB2025022136 SB2025022446 SB2025022447 and 4 more |
||
| #VU94107 - Improper input validation CVE-2024-39929 |
CWE-20 | Medium | 4.98-1.el8, 4.98-1.el9, 4.98-1.fc39, 4.98-1.fc40, 4.98-2.el8 | 11.07.2024 |
SB2024071120 SB20240711141 SB2024080101 and 10 more |
||
| #VU84728 - Command injection CVE-2023-51766 |
CWE-77 | Medium | 4.97.1-1.el7, 4.97.1-1.el8, 4.97.1-1.el9, 4.97.1-1.fc38, 4.97.1-1.fc39 | 24.12.2023 |
SB2023122404 SB2024010334 SB2024010335 and 11 more |
||
| #VU81256 - Out-of-bounds read CVE-2023-42119 |
CWE-125 | Low | 4.96.1-1.el7, 4.96.1-1.el8, 4.96.1-1.el9, 4.96.1-1.fc37, 4.96.1-1.fc38, 4.96.1-1.fc39, 4.96.1-1.fc40 | 28.09.2023 |
SB2023092821 SB2023100243 SB2023100244 and 9 more |
||
| #VU81254 - Memory corruption CVE-2023-42117 |
CWE-119 | Critical | 4.96.1-1.el7, 4.96.1-1.el8, 4.96.1-1.el9, 4.96.1-1.fc37, 4.96.1-1.fc38, 4.96.1-1.fc39, 4.96.1-1.fc40 | 28.09.2023 |
SB2023092821 SB2023100243 SB2023100244 and 10 more |
||
| #VU81253 - Stack-based buffer overflow CVE-2023-42116 |
CWE-121 | Critical | 4.96.1-1.el7, 4.96.1-1.el8, 4.96.1-1.el9, 4.96.1-1.fc37, 4.96.1-1.fc38, 4.96.1-1.fc39, 4.96.1-1.fc40 | 28.09.2023 |
SB2023092821 SB2023100243 SB2023100244 and 10 more |
||
| #VU81252 - Out-of-bounds write CVE-2023-42115 |
CWE-787 | Critical | 4.96.1-1.el7, 4.96.1-1.el8, 4.96.1-1.el9, 4.96.1-1.fc37, 4.96.1-1.fc38, 4.96.1-1.fc39, 4.96.1-1.fc40 | 28.09.2023 |
SB2023092821 SB2023100243 SB2023100244 and 8 more |
||
| #VU81251 - Out-of-bounds read CVE-2023-42114 |
CWE-125 | Low | 4.96.1-1.el7, 4.96.1-1.el8, 4.96.1-1.el9, 4.96.1-1.fc37, 4.96.1-1.fc38, 4.96.1-1.fc39, 4.96.1-1.fc40 | 28.09.2023 |
SB2023092821 SB2023100243 SB2023100244 and 9 more |
||
| #VU73857 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2021-38371 |
CWE-300 | Medium | 4.95-1.el8 | 20.03.2023 |
SB2022082219 SB2023040605 SB2024071024 and 2 more |
||
| #VU69579 - Use After Free CVE-2022-3559 |
CWE-416 | Medium | 4.96-3.el7, 4.96-3.el8, 4.96-3.el9, 4.96-4.fc35, 4.96-4.fc36, 4.96-4.fc37 | 24.11.2022 |
SB2022112417 SB2022112418 SB2023012474 and 9 more |
||
| #VU66692 - Release of invalid pointer or reference CVE-2022-37451 |
CWE-763 | Medium | 4.96-2.fc35, 4.96-2.fc36 | 22.08.2022 |
SB2022082220 SB2023060672 SB2022083041 and 1 more |
||
| #VU27959 - Out-of-bounds read CVE-2020-12783 |
CWE-125 | Medium | 4.92.3-2.el6, 4.93-3.el7, 4.93-3.el8, 4.93-8.fc31, 4.93-8.fc32 | 18.05.2020 |
SB2020051804 SB2020051805 SB2020052108 and 7 more |
||
| #VU21399 - Heap-based Buffer Overflow CVE-2019-16928 |
CWE-122 | High | 4.92.3-1.el6, 4.92.3-1.el7, 4.92.3-1.fc29, 4.92.3-1.fc30, 4.92.3-1.fc31 | 28.09.2019 |
SB2019092805 SB2019092806 SB2019092807 and 11 more |
||
| #VU20924 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2019-15846 |
CWE-78 | High | 4.92.2-1.el6, 4.92.2-1.el7, 4.92.2-1.fc29, 4.92.2-1.fc30, 4.92.2-1.fc31 | 06.09.2019 |
SB2019090614 SB2019090615 SB2019090616 and 11 more |
Showing elements 1 - 20 out of 32