Debian/exim4: critical 9.8
Exim 4.92 through 4.92.2 allows remote code execution, a different vulnerability than CVE-2019-15846. There is a heap-based buffer overflow in string_vformat in string.c involving a long EHLO command.
Action: Upgrade exim4 to 4.92.2-3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.92.2-3 | - |
Fixed versions
| 4.92.2-3 |
Sources
- osv: DEBIAN-CVE-2019-16928#Debian:14/exim4
- https://security-tracker.debian.org/tracker/CVE-2019-16928
published · modified · JSON