Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:30345
HistoryMay 04, 2021 - 10:34 p.m.

Arbitrary Code Execution

2021-05-0422:34:08
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
16
arbitrary code execution
exim4
heap buffer underflow
smtp_ungetc
software vulnerability

EPSS

0.005

Percentile

76.7%

exim4 is vulnerable to arbitrary code execution. A heap buffer underflow in smtp_ungetc() allows an attacker to execute arbitrary code on the host OS.