CVE-2020-28009: Buffer Overflow
Exim 4 before 4.94.2 allows Integer Overflow to Buffer Overflow because getstdinput allows unbounded reads that are accompanied by unbounded increases in a certain size variable. NOTE: exploitation may be impractical because of the execution time needed to overflow (multiple days).
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-28009?
CVE-2020-28009 is a vulnerability in Exim 4 before 4.94.2 that allows an integer overflow to buffer overflow.
What is the severity of CVE-2020-28009?
The severity of CVE-2020-28009 is high, with a severity score of 7.8.
Which software versions are affected by CVE-2020-28009?
Exim versions from 4.00 to 4.94.2 are affected by CVE-2020-28009.
Is it possible to exploit CVE-2020-28009?
Exploitation of CVE-2020-28009 may be impractical due to the long execution time needed to overflow (multiple days).
Where can I find more information about CVE-2020-28009?
More information about CVE-2020-28009 can be found at: https://www.exim.org/static/doc/security/CVE-2020-qualys/CVE-2020-28009-STDIN.txt