exim4 | Snyk

Direct Vulnerabilities

Known vulnerabilities in the exim4 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L CRLF Injection	*
L Use of Uninitialized Resource	*
L Use After Free	*
L Out-of-bounds Write	*
H Inclusion of Functionality from Untrusted Control Sphere	<4.98.2-1+deb13u4
H Directory Traversal	<4.98.2-1+deb13u4
L TEMP-0000000-D87062	*
L TEMP-0000000-373EF6	*
M Improper Resource Shutdown or Release	<4.89-3
L Numeric Range Comparison Without Minimum Check	<4.96-15+deb12u10
L Use After Free	<4.96-15+deb12u9
C Missing Initialization of Resource	<4.96-15+deb12u9
M Out-of-bounds Read	<4.96-15+deb12u9
C Out-of-bounds Write	<4.96-15+deb12u9
H Incorrect Provision of Specified Functionality	<4.96-15+deb12u9
H CVE-2025-30232	<4.96-15+deb12u7
L CVE-2024-39929	<4.96-15+deb12u5
M Insufficient Verification of Data Authenticity	<4.96-15+deb12u4
L CVE-2023-42119	<4.96-15+deb12u3
C CVE-2023-42117	<4.96-15+deb12u3
C CVE-2023-42116	<4.96-15+deb12u2
L CVE-2023-42115	<4.96-15+deb12u2
M CVE-2023-42114	<4.96-15+deb12u2
C Out-of-bounds Write	<4.94.2-5
H Release of Invalid Pointer or Reference	<4.95-4
H Arbitrary Code Injection	<4.95~RC2-1
M Race Condition	<4.94.2-1
C CVE-2020-28026	<4.94.2-1
H Out-of-bounds Read	<4.94.2-1
C Out-of-bounds Write	<4.94.2-1
H Out-of-bounds Read	<4.94.2-1
C Out-of-bounds Write	<4.94.2-1
H CVE-2020-28021	<4.94.2-1
C Integer Overflow or Wraparound	<4.92~RC5-1
H Improper Initialization	<4.94.2-1
C Use After Free	<4.94.2-1
C Integer Overflow or Wraparound	<4.94.2-1
H Out-of-bounds Write	<4.94.2-1
H CVE-2020-28015	<4.94.2-1
M Improper Privilege Management	<4.94.2-1
H Out-of-bounds Write	<4.94.2-1
H CVE-2020-28012	<4.94.2-1
H Out-of-bounds Write	<4.94.2-1
H Out-of-bounds Write	<4.94.2-1
H Integer Overflow or Wraparound	<4.94.2-1
H Improper Privilege Management	<4.94.2-1
H Link Following	<4.94.2-1
H Out-of-bounds Read	<4.93-16
C Out-of-bounds Write	<4.92.2-3
C CVE-2019-15846	<4.92.1-3
C Improper Data Handling	<4.92-10
C OS Command Injection	<4.92~RC3-1
H Loop with Unreachable Exit Condition ('Infinite Loop')	<4.89-13
C Use After Free	<4.89-12
C Out-of-Bounds	<4.96-7
H Out-of-Bounds	<4.96-4
C Buffer Overflow	<4.90.1-1
M Key Management Errors	<4.88~RC6-2
H Access Restriction Bypass	<4.86.2-1
M Numeric Errors	<4.82.1-2
M Improper Input Validation	<4.82.1-1
M Out-of-Bounds	<4.80-5.1
H Use of Externally-Controlled Format String	<4.75-3
H Improper Input Validation	<4.76-1
H Improper Input Validation	<4.72-4
H CVE-2010-4345	<4.72-3
C Out-of-bounds Write	<4.70-1
M Race Condition	<4.72-1
M Race Condition	<4.72-1
M CVE-2005-0022	<4.34-10
H CVE-2005-0021	<4.34-10
H CVE-2004-0400	<4.33-1
H CVE-2004-0399	<4.33-1
H CVE-2002-1381	<4.11-0.0.1

Vulnerability

Vulnerable Version

CRLF Injection