Debian/sa-exim: high 8.8
sa-exim 4.2.1 allows attackers to execute arbitrary code if they can write a .cf file or a rule. This occurs because Greylisting.pm relies on eval (rather than direct parsing and/or use of the taint f
Action: Upgrade sa-exim to 4.2.1-19 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.2.1-19 | - |
Fixed versions
| 4.2.1-19 |
Sources
- osv: DEBIAN-CVE-2019-19920#Debian:13/sa-exim
- https://security-tracker.debian.org/tracker/CVE-2019-19920
published · modified · JSON