Vulnerability Details CVE-2020-28019
Exim 4 before 4.94.2 has Improper Initialization that can lead to recursion-based stack consumption or other consequences. This occurs because use of certain getc functions is mishandled when a client uses BDAT instead of DATA.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.009
EPSS Ranking 74.9%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
Products affected by CVE-2020-28019
-
-
-
cpe:2.3:a:exim:exim:4.89.1
-
-
cpe:2.3:a:exim:exim:4.90.0.22
-
cpe:2.3:a:exim:exim:4.90.0.27
-
cpe:2.3:a:exim:exim:4.90.1
-
-
-
cpe:2.3:a:exim:exim:4.92.1
-
cpe:2.3:a:exim:exim:4.92.2
-
-
cpe:2.3:a:exim:exim:4.93.0.4
-
cpe:2.3:a:exim:exim:4.93.0.4-3.1
-
-
cpe:2.3:a:exim:exim:4.94.1