← All advisories

Critical severity9.8NVD Advisory· Published Aug 7, 2022· Updated Jun 17, 2026

CVE-2022-37452

CVE-2022-37452

Description

Exim before 4.95 has a heap-based buffer overflow for the alias list in host_name_lookup in host.c when sender_host_name is set.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Exim/Exim3 versions
cpe:2.3:a:exim:exim:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:exim:exim:*:*:*:*:*:*:*:*range: <4.95
- (no CPE)
- (no CPE)range: <4.95
Debian/linux
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

5

github.com/Exim/exim/commit/d4bc023436e4cce7c23c5f8bb5199e178b4cc743nvdPatchThird Party Advisory
github.com/Exim/exim/compare/exim-4.94...exim-4.95nvdPatchRelease NotesThird Party Advisory
lists.debian.org/debian-lts-announce/2022/08/msg00014.htmlnvdMailing ListThird Party Advisory
www.exim.org/static/doc/security/nvdVendor Advisory
www.openwall.com/lists/oss-security/2022/08/06/8nvdMailing ListThird Party Advisory

News mentions

0

No linked articles in our index yet.