Known vulnerabilities in exim - page 2

Software: exim
Software CPE: cpe:2.3:o:fedoraproject:exim:*:*:*:*:*:fedora:*:*
Total vulnerabilities: 32
Public exploits: 7
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting exim exim is affected by 32 known vulnerabilities: 3 critical, 5 high, 14 medium, 10 low Critical High Medium Low

Vulnerabilities (32)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU12130 - Use of Externally-Controlled Format String
CVE-2011-1764
CWE-134 High
No
No
4.72-2.el6, 4.72-4.el6 24.04.2018 SB2015051001
SB2015092639
SB2011052404
and 1 more
#VU10442 - Buffer overflow
CVE-2018-6789
CWE-120 High
Available
Exploited
4.90.1-1.el6, 4.90.1-1.el7, 4.90.1-1.fc26, 4.90.1-1.fc27, 4.90.1-2.el6, 4.90.1-2.el7, 4.90.1-2.fc26, 4.90.1-2.fc27 09.02.2018 SB2018020911
SB2018021101
SB2018021206
and 13 more
#VU9428 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2017-16944
CWE-835 Low
No
No
4.89-4.el6, 4.89-4.el7, 4.89-7.fc26, 4.89-7.fc27 28.11.2017 SB2017112805
SB2017112912
SB2017113009
and 8 more
#VU9427 - Use After Free
CVE-2017-16943
CWE-416 High
No
No
4.89-3.el6, 4.89-3.el7, 4.89-4.el6, 4.89-4.el7, 4.89-6.fc26, 4.89-6.fc27, 4.89-7.fc26, 4.89-7.fc27 28.11.2017 SB2017112803
SB2017112804
SB2017113009
and 13 more
#VU7136 - Memory corruption
CVE-2017-1000369
CWE-119 Medium
No
No
4.89-2.el6, 4.89-2.el7, 4.89-5.fc26 21.06.2017 SB2017062102
SB2017062103
SB2017083110
and 8 more
#VU1432 - Exposure of sensitive information to an unauthorized actor
CVE-2016-9963
CWE-200 Medium
No
No
4.87.1-1.fc24, 4.87.1-1.fc25, 4.88-1.el6, 4.88-2.el6, 4.88-2.el7, 4.88-3.el7 19.12.2016 SB2016122002
SB2017083110
SB2017010502
and 7 more
#VU342 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2011-0017
CWE-78 Low
No
No
4.72-2.el6 22.08.2016 SB2011012801
SB2015092630
SB2011052404
#VU341 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2010-4345
CWE-78 Low
Available
Exploited
4.72-2.el6 22.08.2016 SB2011012801
SB2015092630
SB2015092638
and 3 more
#VU34 - Use of Potentially Dangerous Function
CVE-2016-1531
CWE-250 Low
Available
No
4.84.2-1.el6, 4.84.2-1.el7, 4.85.2-1.fc22, 4.86.2-1.fc23 28.06.2016 SB2016030302
SB2017083110
SB2016031002
and 7 more
#VU41356 - Improper input validation
CVE-2014-2972
CWE-20 Medium
No
No
4.72-6.el6 04.09.2014 SB2014090406
SB2014082103
SB2016072024
and 1 more
#VU43366 - Heap-based Buffer Overflow
CVE-2012-5671
CWE-122 Medium
No
No
4.72-3.el6 31.10.2012 SB2012103106
SB2012102601
#VU45039 - Improper input validation
CVE-2011-1407
CWE-20 Medium
No
No
4.72-2.el6, 4.72-4.el6 16.05.2011 SB2011051603
SB2011052404
SB2012102802


Showing elements 21 - 40 out of 32