CVE-2020-28022

Exim 4 before 4.94.2 has Improper Restriction of Write Operations within the Bounds of a Memory Buffer. This occurs when processing name=value pairs within MAIL FROM and RCPT TO commands.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2021-05-06

Last modified

2024-08-04

Weaknesses

CWE-787

Affected products

• Exim (Exim)

References

• https://www.exim.org/static/doc/security/CVE-2020-qualys/CVE-2020-28022-EXOPT.txt