tocsin

Debian/exim4: high 7.5

Exim through 4.93 has an out-of-bounds read in the SPA authenticator that could result in SPA/NTLM authentication bypass in auths/spa.c and auths/auth-spa.c.

Action: Upgrade exim4 to 4.93-16 or later.

Affected

introducedfixedlast affected
04.93-16-

Fixed versions

4.93-16

Sources

published · modified · JSON