Servers and applications
CVE-2020-28025
Exim 4 before 4.94.2 allows Out-of-bounds Read because pdkim_finish_bodyhash does not validate the relationship between sig->bodyhash.len and b->bh.len; thus, a crafted DKIM-Signature header might lead to a leak of sensitive information from process memory.
- Severity
- High 7.5
- Published
- 6 May 2021
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 4.94.2
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
EximServers and applications · cpe:a:exim:exim |
|