Unrated severityNVD Advisory· Published May 6, 2021· Updated Aug 4, 2024

CVE-2020-28023

Description

Exim 4 before 4.94.2 allows Out-of-bounds Read. smtp_setup_msg may disclose sensitive information from process memory to an unauthenticated SMTP client.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Exim/Eximdescription
Exim/Eximllm-fuzzy
Range: <4.94.2
osv-coords6 versions
pkg:rpm/opensuse/exim&distro=openSUSE%20Leap%2015.2 pkg:rpm/opensuse/exim&distro=openSUSE%20Tumbleweed pkg:rpm/suse/exim&distro=SUSE%20Package%20Hub%2015%20SP1 pkg:rpm/suse/exim&distro=SUSE%20Package%20Hub%2015%20SP2 pkg:rpm/suse/libspf2&distro=SUSE%20Package%20Hub%2015%20SP1 pkg:rpm/suse/libspf2&distro=SUSE%20Package%20Hub%2015%20SP2
< 4.94.2-lp152.8.3.1+ 5 more
- (no CPE)range: < 4.94.2-lp152.8.3.1
- (no CPE)range: < 4.94.2-4.2
- (no CPE)range: < 4.94.2-bp151.2.4.1
- (no CPE)range: < 4.94.2-bp152.6.4.1
- (no CPE)range: < 1.2.10-bp151.4.1
- (no CPE)range: < 1.2.10-bp152.5.1

Patches

Vulnerability mechanics

References

www.exim.org/static/doc/security/CVE-2020-qualys/CVE-2020-28023-SCHAD.txtmitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000