CVE-2020-28013

Description

Exim 4 before 4.94.2 allows Heap-based Buffer Overflow because it mishandles -F .( on the command line, and thus may allow privilege escalation from any user to root. This occurs because of the interpretation of negative sizes in strncpy.

Risk Information

Base Score

7.8

MODERATE

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.217

Associated Vulnerability

Vulnerability	OS Platform
exim4 security update(DSA-4912-1) exim4_4.92-8+deb10u6_all.deb	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234