Remote code execution affecting Exim
A vulnerability affecting Exim would allow an unauthenticated malicious actor to cause remote arbitrary code execution on affected systems.
Description
Technical context and vulnerability details
Exim is an open source mail transfer agent (MTA) for Unix-like systems, designed to manage the routing and distribution of emails over the Internet. This tool is affected by a vulnerability labeled CVE-2026-45185 resulting from a “Use After Free” memory management error when processing the BDAT (Binary Data Transmission) protocol on TLS connections using the GnuTLS library. Exploitation of this vulnerability would allow a malicious actor to execute arbitrary code remotely on affected systems, by sending a close_notify TLS during a block transfer. It is classified critical with a severity score of 9.8 according to CVSS V3.1.
Potential Risks & Impact
Potential consequences upon exploitation
- Remote Arbitrary Code Execution;
- Data privacy breach;
- Compromise of system integrity;
Affected systems
Products, components and targeted versions
- Exim versions 4.97 to 4.99.2;
RECOMMENDED ACTIONS:
- Update Exim to its latest stable version;
Sources & External Links
Vendor security advisories and documentation
Advisory Specifications
CSIRT Emergency Response
Is your organization affected or do you suspect an incident? Our security experts are available to assist.
Report an incidentGet our alerts by email
Subscribe to receive our security alert bulletins and Iservices news straight to your inbox.