Exim 4 before 4.94.2 has Execution with Unnecessary Privileges

Exim 4 before 4.94.2 allows Execution with Unnecessary Privileges

Exim before 4.87.1 might allow remote attackers to obtain the private DKIM signing key via vectors related to log files and bounce messages

Exim through 4.97.1 misparses a multiline RFC 2231 header filename, and thus remote attackers can bypass a $mime_filename extension-blocking protection mechanism, and potentially…

Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection during DATA…

Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free

Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write

Exim 4.88 before 4.99.4, in some proxy configurations, mishandles certain short payloads, leading to disclosure of uninitialized stack memory values to a client

In Exim before 4.99.2, when utf8 operators are enabled, there is an out-of-bounds read if large UTF-8 trailing characters are present (malformed UTF-8 header data)

Exim NTLM Challenge Out-Of-Bounds Read Information Disclosure Vulnerability

Exim before 4.97.1 allows SMTP smuggling in certain PIPELINING/CHUNKING configurations

Exim supports the use of multiple "-p" command line arguments which are malloc()'ed and never free()'ed, used in conjunction with other issues allows attackers to cause arbitrary…