Exim through 4.97.1 misparses a multiline RFC 2231 header filename, and thus remote attackers can bypass a $mime_filename extension-blocking protection mechanism, and potentially deliver executable attachments to the mailboxes of end users.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade exim | Aug 22, 2024 | Jul 4, 2024 |
| Debian | — | Upgrade exim4 | Jul 12, 2024 | Jul 4, 2024 |
| Exim | — | Upgrade Exim to version 4.97.1 | Jul 31, 2024 | Jul 4, 2024 |
| Gentoo Linux | — | Upgrade mail-mta/exim. | Aug 16, 2026 | Aug 14, 2026 |
| Suse | — | Upgrade eximonUpgrade eximUpgrade eximstats-html | Jul 26, 2024 | Jul 4, 2024 |
| Ubuntu | — | Upgrade eximon4 (Ubuntu Pro)Upgrade exim4-baseUpgrade exim4Upgrade exim4 (Ubuntu Pro)Upgrade exim4-base (Ubuntu Pro)Upgrade eximon4 | Aug 1, 2024 | Jul 4, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub