← Zurück zur CVE-Suche

CVE-2026-40684

Exim

Beschreibung

In Exim before 4.99.2, on systems using musl libc (not glibc), an attacker can crash the connection instance when malformed DNS data is present in PTR records. This is caused by a dn_expand oddity in octal printing.

CVSS 5.9EPSS 0.362%Risiko 0.61
Quelle öffnen
Veröffentlicht
2026-04-30 22:16:25
Betroffene Versionen
<4.99.2
Typ
Core software
Vektor
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H