CVE-2020-28023

HIGH

Exim 4.00-4.94.1 - Unauthenticated Out-of-bounds Read in SMTP Message Setup

Title source: llm

Description

Exim 4 before 4.94.2 allows Out-of-bounds Read. smtp_setup_msg may disclose sensitive information from process memory to an unauthenticated SMTP client.

References (1)

Core 1

Core References

Third Party Advisory x_refsource_misc

https://www.exim.org/static/doc/security/CVE-2020-qualys/CVE-2020-28023-SCHAD.txt

Scores

CVSS v3 7.5

EPSS 0.0256

EPSS Percentile 83.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE

CWE-125

Status published

Products (1)

exim/exim 4.00 - 4.94.2

Published May 06, 2021

Tracked Since Feb 18, 2026