Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2020-12783 →
DEBIAN-CVE-2020-12783
Exim through 4.93 has an out-of-bounds read in the SPA authenticator that could result in SPA/NTLM authentication bypass in auths/spa.c and auths/auth...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Exim through 4.93 has an out-of-bounds read in the SPA authenticator that could result in SPA/NTLM authentication bypass in auths/spa.c and auths/auth-spa.c.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
exim4
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.93-16"}]}]
Debian:13
exim4
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.93-16"}]}]
Debian:14
exim4
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.93-16"}]}]
Références
- advisory security-tracker.debian.org