CVE-2026-94057

Publié : 19 septembre 2026

Modifié : 19 septembre 2026

Score CVSS

MEDIUM

Description détaillée

Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection during DATA processing.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N

Références et Patchs

https://lists.exim.org/lurker/message/20260918.121220.0f87338e.en.html

Dernières Vulnérabilités

CVE-2026-94056

Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory.

VOIR DÉTAILS

CVE-2026-94055

Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free.

VOIR DÉTAILS

CVE-2026-94054

Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write.

VOIR DÉTAILS