CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Exim Mail Server Remote Code Execution (RCE) Vulnerability Analysis and Mitigation Guide (CVE-2019-16928)
[Affected Scope] Exim mail server versions 4.92 through 4.92.2
[Impact] Unauthenticated remote attackers can trigger a heap-based buffer overflow by sending a crafted, long EHLO command, leading to arbitrary code execution or complete denial of service (DoS)
[Mitigation] Immediately upgrade Exim to the latest stable version (4.92.3 or higher) and restrict SMTP command lengths as a temporary workaround
Exim Mail Transfer Agent (MTA) Remote Command Execution Vulnerability Analysis and Mitigation Guide (CVE-2019-10149)
[Affected Scope] Exim mail server versions 4.87 to 4.91 inclusive
[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges by sending specially crafted recipient addresses
[Mitigation] Immediately upgrade Exim packages to a patched version (4.92 or higher) and apply temporary configuration workarounds
Exim SMTP Mail Server base64d Buffer Overflow Remote Code Execution (RCE) Vulnerability (CVE-2018-6789)
[Affected Scope] All Exim versions before 4.90.1 with active SMTP listener
[Impact] Unauthenticated remote attackers can execute arbitrary code with root privileges by sending specially crafted Base64 messages
[Mitigation] Immediately upgrade Exim mail servers to the latest stable version (4.90.1 or higher) and restrict SMTP access
Exim Mail Server string_vformat Heap-based Buffer Overflow Remote Code Execution (RCE) Vulnerability (CVE-2010-4344)
[Affected Scope] Exim Mail Transfer Agent (MTA) versions prior to 4.70
[Impact] Unauthenticated remote attackers can execute arbitrary code with root privileges and fully compromise the mail server via a crafted SMTP session.
[Mitigation] Immediately upgrade Exim to the latest stable version (4.70 or higher) and restrict SMTP port access to trusted networks until patched.