CVE-2020-28022

Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.94.2

Description The issue is related to improper restriction of write operations within the bounds of a memory buffer when processing name=value pairs within MAIL FROM and RCPT TO commands. This can be exploited by a remote attacker to execute arbitrary code by sending a specially crafted message to the mail server.

Recommendations For Exim versions prior to 4.94.2, update to version 4.94.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the mail server to minimize the risk of exploitation.