University of Cambridge Exim 4.77
Approved changes feed: RSS · Atom
cpe:2.3:a:exim:exim:4.77:*:*:*:*:*:*:*
part: a version: 4.77 update: *
| Vendor | Exim (394124fe-277b-5eb8-afc3-b5c498937ef9) |
|---|---|
| Product | Exim (6f9e18d0-ac4f-5006-8db5-7919fb601764) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/exim4 |
purl2cpe | 2026-06-01 10:18:20.279824 |
pkg:deb/ubuntu/exim4 |
purl2cpe | 2026-06-01 10:18:20.279825 |
pkg:exim/exim |
purl2cpe | 2026-06-01 10:18:20.279827 |
pkg:github/exim/exim |
purl2cpe | 2026-06-01 10:18:20.279828 |
pkg:rpm/fedora/exim |
purl2cpe | 2026-06-01 10:18:20.279829 |
pkg:rpm/opensuse/exim |
purl2cpe | 2026-06-01 10:18:20.279831 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2014-2972 |
vulnerable | 2026-06-08 05:05:30.572673 |
Details available
expand.c in Exim before 4.83 expands mathematical comparisons twice, which allows local users to gain privileges and execute arbitrary commands via a crafted lookup value.
Published: 2014-09-04T17:00:00.000Z
Updated: 2024-08-06T10:28:46.371Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-2957 |
vulnerable | 2026-06-08 05:05:30.540998 |
Details available
The dmarc_process function in dmarc.c in Exim before 4.82.1, when EXPERIMENTAL_DMARC is enabled, allows remote attackers to execute arbitrary code via the From header in an email, which is passed to the expand_string function.
Published: 2014-09-04T17:00:00.000Z
Updated: 2024-08-06T10:28:46.230Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5671 |
vulnerable | 2026-06-08 05:02:57.995851 |
Details available
Heap-based buffer overflow in the dkim_exim_query_dns_txt function in dkim.c in Exim 4.70 through 4.80, when DKIM support is enabled and acl_smtp_connect and acl_smtp_rcpt are not set to "warn control = dkim_disable_verify," allows remote attackers to execute arbitrary code via an email from a malicious DNS server.
Published: 2012-10-31T16:00:00.000Z
Updated: 2024-08-06T21:14:16.438Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.