CVE-2020-28018

Critical

Exim 4 before 4.94.2 allows Use After Free in smtp_reset in certain situations that may be common for builds with OpenSSL.

mitre·CWE-416·Published 2021-05-06

CVSS

9.8

EPSS

0.57

KEV

Exploits

cve.orgen

122 chars

Exim 4 before 4.94.2 allows Use After Free in smtp_reset in certain situations that may be common for builds with OpenSSL.

NVDen

122 chars

Exim 4 before 4.94.2 allows Use After Free in smtp_reset in certain situations that may be common for builds with OpenSSL.

Exim 4 versiones anteriores a 4.94.2, permite un Uso de la Memoria Previamente Liberada en la función smtp_reset en determinadas situaciones que pueden ser comunes para unas compilaciones con OpenSSL

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	7.5	10.0	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P
3.1	Primary	NVD	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H