CVE-2022-3559: Exim Regex use after free
A vulnerability was found in Exim and classified as problematic. This issue affects some unknown processing of the component Regex Handler. The manipulation leads to use after free. The name of the patch is 4e9ed49f8f12eb331b29bd5b6dc3693c520fddc2. It is recommended to apply a patch to fix this issue. The identifier VDB-211073 was assigned to this vulnerability.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/exim4to a version that resolves this vulnerability.Fixed in 4.96-15+deb12u10Fixed in 4.98.2-1+deb13u4Fixed in 4.98.2-1+deb13u5Fixed in 4.100.1-4 - Upgrade
Upgrade
debian/exim4to a version that resolves this vulnerability.Fixed in 4.96-4 - Upgrade
Upgrade
Eximto a version that resolves this vulnerability.Patch 4e9ed49f8f12eb331b29bd5b6dc3693c520fddc2
Event History
Frequently Asked Questions
What is CVE-2022-3559?
CVE-2022-3559 is a vulnerability found in Exim that allows for use after free due to a manipulation in the Regex Handler component.
How severe is CVE-2022-3559?
CVE-2022-3559 has a severity value of 7.5, which is classified as high.
Which software versions are affected by CVE-2022-3559?
CVE-2022-3559 affects Exim and Fedora versions 35, 36, and 37.
What is the patch for CVE-2022-3559?
The patch for CVE-2022-3559 has the name 4e9ed49f8f12eb331b29bd5b6dc3693c520fddc2.
Where can I find more information about CVE-2022-3559?
You can find more information about CVE-2022-3559 at the following references: [https://bugs.exim.org/show_bug.cgi?id=2915](https://bugs.exim.org/show_bug.cgi?id=2915), [https://git.exim.org/exim.git/commit/4e9ed49f8f12eb331b29bd5b6dc3693c520fddc2](https://git.exim.org/exim.git/commit/4e9ed49f8f12eb331b29bd5b6dc3693c520fddc2), [https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EIH4W5R7SHTUEQFWWKB4TUO5YFZX64KV/](https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EIH4W5R7SHTUEQFWWKB4TUO5YFZX64KV/)