- Vendor / Project
- Exim
- Product
- Mail Transfer Agent (MTA)
- Date added
- Jan 10, 2022
- Due date
- Jul 10, 2022
- Known ransomware use
- Unknown
- CWEs
- CWE-78
Description
Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution.
Required action
Apply updates per vendor instructions.