exim (SUSE:Package Hub 15 SP5) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Package Hub 15 SP5 package exim, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (8)

• CVE-2023-42116 — CVSS 9.8 (critical): Exim SMTP Challenge Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute…
• CVE-2023-42117 — CVSS 9.8 (critical): Exim Improper Neutralization of Special Elements Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute…
• CVE-2023-42115 — CVSS 9.8 (critical): Exim AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on…
• CVE-2024-39929 — CVSS 5.4 (medium): Exim through 4.97.1 misparses a multiline RFC 2231 header filename, and thus remote attackers can bypass a $mime_filename…
• CVE-2023-42114 — CVSS 5.3 (medium): Exim NTLM Challenge Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose…
• CVE-2023-51766 — CVSS 5.3 (medium): Exim before 4.97.1 allows SMTP smuggling in certain PIPELINING/CHUNKING configurations. Remote attackers can use a published exploitation…
• CVE-2022-3559 — CVSS 4.6 (medium): A vulnerability was found in Exim and classified as problematic. This issue affects some unknown processing of the component Regex Handler…
• CVE-2023-42119 — CVSS 3.1 (low): Exim dnsdb Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose…