CVE-2020-28009 - Exim 4 before 4.94.2 allows Integer Overflow to Buffer Overflow because get_stdinput allows unbounded reads that are accompanied by unbounded increases in a certain size variable

Back Back to CVE browser

HIGH

Exim 4 before 4.94.2 allows Integer Overflow to Buffer Overflow because get_stdinput allows unbounded reads that are accompanied by unbounded increases in a certain size variable

Published May 6, 2021

7.8

HIGH

CVSS 3.1

EPSS 0.47%

Description

Exim 4 before 4.94.2 allows Integer Overflow to Buffer Overflow because get_stdinput allows unbounded reads that are accompanied by unbounded increases in a certain size variable. NOTE: exploitation may be impractical because of the execution time needed to overflow (multiple days).

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-190

Integer Overflow

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-20500
Advisory
https://www.exim.org/static/doc/security/CVE-2020-qualys/CVE-2020-28009-STDIN.txt
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-20500		Advisory
https://www.exim.org/static/doc/security/CVE-2020-qualys/CVE-2020-28009-STDIN.txt		x_refsource_MISCVendor Advisory