Total vulnerabilities in the database
Exim before 4.97.1 allows SMTP smuggling in certain PIPELINING/CHUNKING configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism. This occurs because Exim supports <LF>.<CR><LF> but some other popular e-mail servers do not.
| Software | From | Fixed in |
|---|---|---|
| exim / exim | - | 4.97.1 |
| fedoraproject / extra_packages_for_enterprise_linux | 8.0 | 8.0.x |
| fedoraproject / extra_packages_for_enterprise_linux | 9.0 | 9.0.x |
| fedoraproject / extra_packages_for_enterprise_linux | 7.0 | 7.0.x |
| fedoraproject / fedora | 38 | 38.x |
| fedoraproject / fedora | 39 | 39.x |
| debian / debian_linux | 10.0 | 10.0.x |