The STARTTLS feature in Exim through 4.94.2 allows response injection (buffering) during MTA SMTP sending.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade exim | Apr 6, 2023 | Aug 10, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 10, 2021 |
| Debian | — | Upgrade exim4 | Jul 30, 2024 | Aug 10, 2021 |
| Exim | — | Upgrade Exim to version 4.94.2 | Aug 23, 2021 | Aug 10, 2021 |
| Ubuntu | — | Upgrade eximon4 (Ubuntu Pro)Upgrade eximon4Upgrade exim4 (Ubuntu Pro)Upgrade exim4-base (Ubuntu Pro)Upgrade exim4-baseUpgrade exim4 | Jul 15, 2024 | Aug 10, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub