CVE-2022-3559

See a problem?
Source
https://nvd.nist.gov/vuln/detail/CVE-2022-3559
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-3559.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-3559
Related
Published
2022-10-17T18:15:12Z
Modified
2024-09-18T03:20:57.951448Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

A vulnerability was found in Exim and classified as problematic. This issue affects some unknown processing of the component Regex Handler. The manipulation leads to use after free. The name of the patch is 4e9ed49f8f12eb331b29bd5b6dc3693c520fddc2. It is recommended to apply a patch to fix this issue. The identifier VDB-211073 was assigned to this vulnerability.

References

Affected packages

Debian:11 / exim4

Package

Name
exim4
Purl
pkg:deb/debian/exim4?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.94.2-7
4.94.2-7+deb11u1
4.94.2-7+deb11u2
4.94.2-7+deb11u3
4.95~RC0-1
4.95~RC1-1
4.95~RC2-1
4.95-1
4.95-2
4.95-3
4.95-4
4.95-5
4.95-6~bpo11+1
4.95-6
4.96~RC0-1
4.96~RC1-1
4.96~RC1-2
4.96~RC2-1
4.96-1~bpo11+1
4.96-1
4.96-3~bpo11+1
4.96-3
4.96-4
4.96-5
4.96-6
4.96-7
4.96-8
4.96-9~bpo11+1
4.96-9
4.96-10
4.96-11~bpo11+1
4.96-11
4.96-12
4.96-13~bpo11+1
4.96-13
4.96-14~bpo11+1
4.96-14
4.96-15~bpo11+1
4.96-15
4.96-16
4.96-17
4.96-18
4.96-19
4.96-20
4.96-21
4.96-22
4.97~RC0-1
4.97~RC0-2
4.97~RC0-3
4.97~RC1-1
4.97~RC1-2
4.97~RC2-1
4.97~RC2-2
4.97~RC3-1
4.97-1~hurd.2
4.97-1
4.97-2
4.97-3
4.97-4
4.97-5
4.97-6
4.97-7
4.97-8~bpo12+1
4.97-8
4.98~RC0-1
4.98~RC1-1
4.98~RC2-1
4.98~RC3-1
4.98~RC3-2~bpo12+1
4.98~RC3-2
4.98-1~bpo12+1
4.98-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:12 / exim4

Package

Name
exim4
Purl
pkg:deb/debian/exim4?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.96-4

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:13 / exim4

Package

Name
exim4
Purl
pkg:deb/debian/exim4?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.96-4

Ecosystem specific 

{
    "urgency": "not yet assigned"
}