CVE-2020-28023: High severity sa-exim vulnerability
Exim 4 before 4.94.2 allows Out-of-bounds Read. smtpsetupmsg may disclose sensitive information from process memory to an unauthenticated SMTP client.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-28023?
CVE-2020-28023 is a vulnerability in Exim, version 4 before 4.94.2, that allows an out-of-bounds read, potentially disclosing sensitive information from process memory to an unauthenticated SMTP client.
What is the severity of CVE-2020-28023?
The severity of CVE-2020-28023 is high, with a CVSS score of 7.5.
How does CVE-2020-28023 affect Exim?
CVE-2020-28023 affects Exim versions 4 before 4.94.2, allowing an out-of-bounds read and potentially exposing sensitive information to an unauthenticated SMTP client.
What is the fix for CVE-2020-28023?
To fix CVE-2020-28023, upgrade Exim to version 4.94.2 or later.
Where can I find more information about CVE-2020-28023?
You can find more information about CVE-2020-28023 at the following link: [CVE-2020-28023](https://www.exim.org/static/doc/security/CVE-2020-qualys/CVE-2020-28023-SCHAD.txt)