CVE-2026-94056

Publié : 19 septembre 2026

Modifié : 19 septembre 2026

Score CVSS

7.5

HIGH

Description détaillée

Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:L

Références et Patchs

https://lists.exim.org/lurker/message/20260918.121220.0f87338e.en.html

Dernières Vulnérabilités

CVE-2026-94057

Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection during DATA processing.

VOIR DÉTAILS

CVE-2026-94055

Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free.

VOIR DÉTAILS

CVE-2026-94054

Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write.

VOIR DÉTAILS