CVE-2020-28019
Ubuntu Security Notice USN-4934-1
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Exim 4 before 4.94.2 has Improper Initialization that can lead to recursion-based stack consumption or other consequences. This occurs because use of certain getc functions is mishandled when a client uses BDAT instead of DATA.
Exim 4 versiones anteriores a 4.94.2, presenta una Inicialización Inapropiada que puede conllevar a un consumo de la pila basado en recursividad u otras consecuencias. Esto ocurre porque el uso de determinadas funciones getc es manejado inapropiadamente cuando un cliente usa BDAT en lugar de DATA
It was discovered that Exim contained multiple security issues. An attacker could use these issues to cause a denial of service, execute arbitrary code remotely, obtain sensitive information, or escalate local privileges.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2020-10-30 CVE Reserved
- 2021-05-04 CVE Published
- 2024-08-04 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-665: Improper Initialization
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.exim.org/static/doc/security/CVE-2020-qualys/CVE-2020-28019-BDATA.txt | 2021-05-10 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Exim Search vendor "Exim" | Exim Search vendor "Exim" for product "Exim" | >= 4.88 < 4.94.2 Search vendor "Exim" for product "Exim" and version " >= 4.88 < 4.94.2" | - |
Affected
| ||||||