CVE-2026-94054

Name
CVE-2026-94054
Description
Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write.
NVD Severity
unknown
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
cve@mitre.org https://lists.exim.org/lurker/message/20260918.121220.0f87338e.en.html

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:exim:exim:*:*:*:*:*:*:*:* exim >= None < 4.100.1

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
exim edge-community 4.99.5-r0 None possibly vulnerable
exim edge-community 4.99.4-r0 None possibly vulnerable
exim edge-community 4.99.3-r0 None possibly vulnerable
exim edge-community 4.99.2-r0 None possibly vulnerable
exim edge-community 4.99.1-r1 None possibly vulnerable
exim edge-community 4.99.1-r0 Celeste <cielesti@protonmail.com> possibly vulnerable
exim edge-community 4.99-r2 Celeste <cielesti@protonmail.com> possibly vulnerable
exim edge-community 4.99-r1 Celeste <cielesti@protonmail.com> possibly vulnerable
exim edge-community 4.99-r0 Celeste <cielesti@protonmail.com> possibly vulnerable
exim edge-community 4.98.2-r0 Celeste <cielesti@protonmail.com> possibly vulnerable
exim edge-community 4.98.1-r0 Celeste <cielesti@protonmail.com> possibly vulnerable
exim edge-community 4.98-r0 Celeste <cielesti@protonmail.com> possibly vulnerable
exim edge-community 4.97.1-r0 Celeste <cielesti@protonmail.com> possibly vulnerable
exim edge-community 4.97-r0 Celeste <cielesti@protonmail.com> possibly vulnerable
exim edge-community 4.96.2-r0 Jesse Young <jlyo@jlyo.org> possibly vulnerable
exim edge-community 4.96.1-r0 Jesse Young <jlyo@jlyo.org> possibly vulnerable
exim edge-community 4.96-r2 Jesse Young <jlyo@jlyo.org> possibly vulnerable
exim edge-community 4.96-r1 Jesse Young <jlyo@jlyo.org> possibly vulnerable
exim edge-community 4.96-r0 Jesse Young <jlyo@jlyo.org> possibly vulnerable
exim edge-community 4.95-r0 Jesse Young <jlyo@jlyo.org> possibly vulnerable
exim edge-community 4.94.2-r1 Jesse Young <jlyo@jlyo.org> possibly vulnerable
exim edge-community 4.94.2-r0 Jesse Young <jlyo@jlyo.org> possibly vulnerable
exim edge-community 4.93-r1 None possibly vulnerable
exim edge-community 4.92.2-r1 None possibly vulnerable
exim edge-community 4.92.2-r0 None possibly vulnerable
exim edge-community 4.92.1-r0 None possibly vulnerable
exim edge-community 4.92-r0 None possibly vulnerable
exim edge-community 4.90.1-r0 None possibly vulnerable
exim edge-community 4.89.1-r0 None possibly vulnerable
exim edge-community 4.89-r7 None possibly vulnerable
exim edge-community 4.89-r5 None possibly vulnerable
exim 3.24-community 4.99.5-r0 None possibly vulnerable
exim 3.24-community 4.99.4-r0 None possibly vulnerable