CVE-2020-28025: High severity sa-exim vulnerability
Exim 4 before 4.94.2 allows Out-of-bounds Read because pdkimfinishbodyhash does not validate the relationship between sig->bodyhash.len and b->bh.len; thus, a crafted DKIM-Signature header might lead to a leak of sensitive information from process memory.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-28025?
CVE-2020-28025 is a vulnerability in Exim 4 before version 4.94.2 that allows an out-of-bounds read, potentially leading to a leak of sensitive information from process memory.
How severe is CVE-2020-28025?
CVE-2020-28025 has a severity rating of 7.5, indicating a high severity vulnerability.
What software versions are affected by CVE-2020-28025?
CVE-2020-28025 affects Exim versions from 4.00 to 4.94.1.
How can I fix CVE-2020-28025?
To fix CVE-2020-28025, update Exim to version 4.94.2 or later.
Where can I find more information about CVE-2020-28025?
More information about CVE-2020-28025 can be found at the following reference: [link](https://www.exim.org/static/doc/security/CVE-2020-qualys/CVE-2020-28025-BHASH.txt).