CVE-2020-28019 log

Source
Severity Medium
Remote Yes
Type Denial of service
Description
Exim 4 before 4.94.2 has improper initialization that can lead to recursion-based stack consumption or other consequences. This occurs because use of certain getc functions is mishandled when a client uses BDAT instead of DATA.
Group Package Affected Fixed Severity Status Ticket
AVG-1911 exim 4.94-3 4.94.2-1 High Fixed
References
https://www.openwall.com/lists/oss-security/2021/05/04/6
https://www.qualys.com/2021/05/04/21nails/21nails.txt
https://git.exim.org/exim.git/commitdiff/99d057fad97a2def9f000ebccda83e4008112819