Log in Start free

Vulnerability · Published Oct 17, 2022 · Assigned by VulDB

CVE-2022-3559Exim Regex use after free

Medium 4.6

In plain English

A medium-severity memory corruption in Exim from unspecified. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 5.0% (higher than 92% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)4.6Medium
Exploit odds (30 days)5.0%top 7.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A vulnerability was found in Exim and classified as problematic. This issue affects some unknown processing of the component Regex Handler. The manipulation leads to use after free. The name of the patch is 4e9ed49f8f12eb331b29bd5b6dc3693c520fddc2. It is recommended to apply a patch to fix this issue. The identifier VDB-211073 was assigned to this vulnerability.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12exim44.96-4DEBIAN-CVE-2022-3559
Debian:13exim44.96-4DEBIAN-CVE-2022-3559
Debian:14exim44.96-4DEBIAN-CVE-2022-3559
Ubuntu:22.04:LTSexim44.95-4ubuntu2.2USN-5741-1
Ubuntu:22.04:LTSexim44.95-4ubuntu2.2UBUNTU-CVE-2022-3559

Affected products (as reported)

VendorProductVersions
unspecified Exim n/a

Weakness: CWE-119 · Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

References