CVE-2020-28022

Description

Exim 4 before 4.94.2 has Improper Restriction of Write Operations within the Bounds of a Memory Buffer. This occurs when processing name=value pairs within MAIL FROM and RCPT TO commands.

References

https://www.tenable.com/cyber-exposure/2021-threat-landscape-retrospective

https://www.exim.org/static/doc/security/CVE-2020-qualys/CVE-2020-28022-EXOPT.txt

Details

Source: Mitre, NVD

Named Vulnerability: 21Nails

Risk Information

CVSS v2

CVSS v3

EPSS