exim4 vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the exim4 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
C Heap-based Buffer Overflow	<4.99-7
M CVE-2023-42114	<4.97~RC1-2
L CVE-2023-42119	<4.97~RC2-2
H Out-of-bounds Read	<4.93-16
H CVE-2020-28015	<4.94.2-1
H CVE-2020-28021	<4.94.2-1
C Improper Input Validation	<4.92~RC3-1
L CVE-2024-39929	<4.98~RC3-2
L Out-of-Bounds	<4.96-7
C CVE-2019-15846	<4.92.1-3
L CVE-2023-42115	<4.97~RC1-2
C Out-of-Bounds	<4.94.2-1
H Out-of-bounds Read	<4.94.2-1
M Improper Privilege Management	<4.94.2-1
M Out-of-Bounds	<4.80-5.1
H Loop with Unreachable Exit Condition ('Infinite Loop')	<4.89-13
C CVE-2023-42117	<4.97~RC2-2
H CVE-2025-30232	<4.98.1-2
H Access Restriction Bypass	<4.72-3
H Out-of-bounds Write	<4.94.2-1
H Integer Overflow or Wraparound	<4.94.2-1
C Integer Overflow or Wraparound	<4.92~RC5-1
M Improper Resource Shutdown or Release	<4.89-3
H Improper Input Validation	<4.76-1
L Numeric Errors	<4.82.1-2
H Improper Initialization	<4.94.2-1
H Out-of-bounds Read	<4.94.2-1
L Race Condition	<4.72-1
C Out-of-bounds Write	<4.94.2-5
C Out-of-Bounds	<4.90.1-1
H CVE-2005-0021	<4.34-10
M CVE-2020-28014	<4.94.2-1
L CVE-2025-26794	<4.98-4
H Out-of-bounds Write	<4.94.2-1
C Arbitrary Argument Injection	<4.94.2-1
C Out-of-Bounds	<4.94.2-1
L Use After Free	<4.94.2-1
C Use After Free	<4.89-12
H CVE-2002-1381	<4.11-0.0.1
H Link Following	<4.94.2-1
H Out-of-bounds Write	<4.94.2-1
H Access Restriction Bypass	<4.86.2-1
H CVE-2004-0399	<4.33-1
C CVE-2023-42116	<4.97~RC1-2
C Improper Data Handling	<4.92-10
H Improper Input Validation	<4.72-4
H Use of Externally-Controlled Format String	<4.75-3
C Integer Overflow or Wraparound	<4.94.2-1
H Arbitrary Code Injection	<4.95~RC2-1
L Improper Input Validation	<4.82.1-1
L Race Condition	<4.72-1
H CVE-2004-0400	<4.33-1
M CVE-2005-0022	<4.34-10
H Out-of-Bounds	<4.96-4
M Insufficient Verification of Data Authenticity	<4.97-3
H Release of Invalid Pointer or Reference	<4.95-4
H Exposure of Resource to Wrong Sphere	<4.94.2-1
H Out-of-bounds Write	<4.94.2-1
H Improper Privilege Management	<4.94.2-1
M Key Management Errors	<4.88~RC6-2
C Buffer Overflow	<4.92.2-3
C Out-of-Bounds	<4.70-1

Vulnerability

Vulnerable Version

Heap-based Buffer Overflow

<4.99-7