Debian/exim4: medium 5.3
Exim before 4.97.1 allows SMTP smuggling in certain PIPELINING/CHUNKING configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM a
Action: Upgrade exim4 to 4.96-15+deb12u4 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.96-15+deb12u4 | - |
Fixed versions
| 4.96-15+deb12u4 |
Sources
published · modified · JSON