Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2020-28025 →
DEBIAN-CVE-2020-28025
Exim 4 before 4.94.2 allows Out-of-bounds Read because pdkim_finish_bodyhash does not validate the relationship between sig->bodyhash.len and b->bh.le...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Exim 4 before 4.94.2 allows Out-of-bounds Read because pdkim_finish_bodyhash does not validate the relationship between sig->bodyhash.len and b->bh.len; thus, a crafted DKIM-Signature header might lead to a leak of sensitive information from process memory.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
exim4
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.94.2-1"}]}]
Debian:13
exim4
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.94.2-1"}]}]
Debian:14
exim4
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.94.2-1"}]}]
Références
- advisory security-tracker.debian.org