Buffer Overflow

Affecting exim4 package, versions <4.92-8+deb10u3

Overview

Exim 4.92 through 4.92.2 allows remote code execution, a different vulnerability than CVE-2019-15846. There is a heap-based buffer overflow in string_vformat in string.c involving a long EHLO command.

References

• ADVISORY
• Bugtraq Mailing List
• Debian Security Advisory
• Debian Security Tracker
• Fedora Security Update
• Fedora Security Update
• Fedora Security Update
• GENTOO
• MISC
• MISC
• MISC
• OSS security Advisory
• OSS security Advisory
• OSS security Advisory
• OSS security Advisory
• Ubuntu CVE Tracker
• Ubuntu Security Advisory