CVE-2020-28009

Exim 4 before 4.94.2 allows Integer Overflow to Buffer Overflow because get_stdinput allows unbounded reads that are accompanied by unbounded increases in a certain size variable. NOTE: exploitation may be impractical because of the execution time needed to overflow (multiple days).

References

https://www.exim.org/static/doc/security/CVE-2020-qualys/CVE-2020-28009-STDIN.txt

Affected packages

Git /

Affected ranges

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-28009.json"

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "4.00"
            },
            {
                "fixed": "4.94.2"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "4"
            },
            {
                "fixed": "4.94.2"
            }
        ]
    }
]