https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 18:43:54 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-06520 bdu:2026-06520 https://cve.radiocsirt.org/vuln/bdu:2026-06520 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0589 certfr-2026-avi-0589 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0589 https://cve.radiocsirt.org/vuln/euvd-2026-318372 EUVD-2026-318372 https://cve.radiocsirt.org/vuln/euvd-2026-318372 https://cve.radiocsirt.org/vuln/fkie_cve-2026-45185 <p>Exim before 4.99.3, in certain GnuTLS configurations, has a remotely reachable use-after-free in the BDAT body parsing path. It is triggered when a client sends a TLS close_notify mid-body during a CHUNKING transfer, followed by a final cleartext byte on the same TCP connection. This can lead to heap corruption. An unauthenticated network attacker exploiting this vulnerability could execute arbitrary code.</p> <p>Exim before 4.99.3, in certain GnuTLS configurations, has a remotely reachable use-after-free in the BDAT body parsing path. It is triggered when a client sends a TLS close_notify mid-body during a CHUNKING transfer, followed by a final cleartext byte on the same TCP connection. This can lead to heap corruption. An unauthenticated network attacker exploiting this vulnerability could execute arbitrary code.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-45185 https://cve.radiocsirt.org/vuln/ghsa-fhg4-whcv-f8v4 <p>Exim before 4.99.3, in certain GnuTLS configurations, has a remotely reachable use-after-free in the BDAT body parsing path. It is triggered when a client sends a TLS close_notify mid-body during a CHUNKING transfer, followed by a final cleartext byte on the same TCP connection. This can lead to heap corruption. An unauthenticated network attacker exploiting this vulnerability could execute arbitrary code.</p> <p>Exim before 4.99.3, in certain GnuTLS configurations, has a remotely reachable use-after-free in the BDAT body parsing path. It is triggered when a client sends a TLS close_notify mid-body during a CHUNKING transfer, followed by a final cleartext byte on the same TCP connection. This can lead to heap corruption. An unauthenticated network attacker exploiting this vulnerability could execute arbitrary code.</p> https://cve.radiocsirt.org/vuln/ghsa-fhg4-whcv-f8v4 https://cve.radiocsirt.org/vuln/ncsc-2026-0163 NCSC-2026-0163 https://cve.radiocsirt.org/vuln/ncsc-2026-0163 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-45185 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: exim4, Ubuntu:Pro:16.04:LTS: exim4, Ubuntu:Pro:18.04:LTS: exim4, Ubuntu:Pro:20.04:LTS: exim4, Ubuntu:22.04:LTS: exim4, Ubuntu:24.04:LTS: exim4, Ubuntu:25.10: exim4, Ubuntu:26.04:LTS: exim4</p> <p>Exim before 4.99.3, in certain GnuTLS configurations, has a remotely reachable use-after-free in the BDAT body parsing path. It is triggered when a client sends a TLS close_notify mid-body during a CHUNKING transfer, followed by a final cleartext byte on the same TCP connection. This can lead to heap corruption. An unauthenticated network attacker exploiting this vulnerability could execute arbitrary code.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: exim4, Ubuntu:Pro:16.04:LTS: exim4, Ubuntu:Pro:18.04:LTS: exim4, Ubuntu:Pro:20.04:LTS: exim4, Ubuntu:22.04:LTS: exim4, Ubuntu:24.04:LTS: exim4, Ubuntu:25.10: exim4, Ubuntu:26.04:LTS: exim4</p> <p>Exim before 4.99.3, in certain GnuTLS configurations, has a remotely reachable use-after-free in the BDAT body parsing path. It is triggered when a client sends a TLS close_notify mid-body during a CHUNKING transfer, followed by a final cleartext byte on the same TCP connection. This can lead to heap corruption. An unauthenticated network attacker exploiting this vulnerability could execute arbitrary code.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-45185 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1505 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Exim ausnutzen, um beliebigen Programmcode auszuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Exim ausnutzen, um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1505