CVE-2020-28009 log

Source
Severity Low
Remote No
Type Privilege escalation
Description
Exim 4 before 4.94.2 allows integer overflow to buffer overflow because get_stdinput allows unbounded reads that are accompanied by unbounded increases in a certain size variable. NOTE: exploitation may be impractical because of the execution time needed to overflow (multiple days).
Group Package Affected Fixed Severity Status Ticket
AVG-1911 exim 4.94-3 4.94.2-1 High Fixed
References
https://www.openwall.com/lists/oss-security/2021/05/04/6
https://www.qualys.com/2021/05/04/21nails/21nails.txt
https://git.exim.org/exim.git/commitdiff/1241deaefb71c40436320af7d0bd04c7c9e54241