GCVE - cpe:2.3:a:exim:exim:4.88:-:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:exim:exim:4.88:-:*:*:*:*:*:*

part: a version: 4.88 update: -

Vendor	Exim (`394124fe-277b-5eb8-afc3-b5c498937ef9`)
Product	Exim (`6f9e18d0-ac4f-5006-8db5-7919fb601764`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/exim4`	purl2cpe	2026-06-01 10:18:20.280043
`pkg:deb/ubuntu/exim4`	purl2cpe	2026-06-01 10:18:20.280044
`pkg:exim/exim`	purl2cpe	2026-06-01 10:18:20.280046
`pkg:github/exim/exim`	purl2cpe	2026-06-01 10:18:20.280047
`pkg:rpm/fedora/exim`	purl2cpe	2026-06-01 10:18:20.280049
`pkg:rpm/opensuse/exim`	purl2cpe	2026-06-01 10:18:20.280050

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-16943`	vulnerable	2026-06-08 05:09:07.607605	Details available The receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via vectors involving BDAT commands. Published: 2017-11-25T17:00:00.000Z Updated: 2024-08-05T20:43:59.963Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1039872 https://lists.exim.org/lurker/message/20171125.034842.d1d75cac.en.html https://git.exim.org/exim.git/commit/4090d62a4b25782129cc1643596dc2f6e8f63bde http://openwall.com/lists/oss-security/2017/11/25/3 https://github.com/LetUsFsck/PoC-Exploit-Mirror/tree/master/CVE-2017-16944	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-1000369`	vulnerable	2026-06-08 05:08:34.433092	Details available Exim supports the use of multiple "-p" command line arguments which are malloc()'ed and never free()'ed, used in conjunction with other issues allows attackers to cause arbitrary code execution. This affects exim version 4.89 and earlier. Please note that at this time upstream has released a patch (commit 65e061b76867a9ea7aeeb535341b790b90ae6c21), but it is not known if a new point release is available that addresses this issue at this time. Published: 2017-06-19T16:00:00.000Z Updated: 2024-08-05T22:00:41.224Z Open on db.gcve.eu Reference links https://github.com/Exim/exim/commit/65e061b76867a9ea7aeeb535341b790b90ae6c21 http://www.securitytracker.com/id/1038779 http://www.securityfocus.com/bid/99252 https://access.redhat.com/security/cve/CVE-2017-1000369 https://security.gentoo.org/glsa/201709-19	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.