Vulnerability Details CVE-2020-28025
Exim 4 before 4.94.2 allows Out-of-bounds Read because pdkim_finish_bodyhash does not validate the relationship between sig->bodyhash.len and b->bh.len; thus, a crafted DKIM-Signature header might lead to a leak of sensitive information from process memory.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 71.7%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
Products affected by CVE-2020-28025
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
cpe:2.3:a:exim:exim:4.80.1
-
-
cpe:2.3:a:exim:exim:4.82.1
-
cpe:2.3:a:exim:exim:4.84.2
-
-
cpe:2.3:a:exim:exim:4.85.1
-
cpe:2.3:a:exim:exim:4.85.2
-
-
cpe:2.3:a:exim:exim:4.86.1
-
cpe:2.3:a:exim:exim:4.86.2
-
-
cpe:2.3:a:exim:exim:4.87.1
-
-
-
cpe:2.3:a:exim:exim:4.89.1
-
-
cpe:2.3:a:exim:exim:4.90.0.22
-
cpe:2.3:a:exim:exim:4.90.0.27
-
cpe:2.3:a:exim:exim:4.90.1
-
-
-
cpe:2.3:a:exim:exim:4.92.1
-
cpe:2.3:a:exim:exim:4.92.2
-
-
cpe:2.3:a:exim:exim:4.93.0.4
-
cpe:2.3:a:exim:exim:4.93.0.4-3.1
-
-
cpe:2.3:a:exim:exim:4.94.1