CVE-2022-3620

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-3620
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-3620.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-3620
Downstream
Published
2022-10-20T20:15:09.690Z
Modified
2026-04-10T04:49:18.653065Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

A vulnerability was found in Exim and classified as problematic. This issue affects the function dmarcdnslookup of the file dmarc.c of the component DMARC Handler. The manipulation leads to use after free. The attack may be initiated remotely. The name of the patch is 12fb3842f81bcbd4a4519d5728f2d7e0e3ca1445. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211919.

References

Affected packages

Git / github.com/exim/exim

Affected ranges

Type
GIT
Repo
https://github.com/exim/exim
Events
Introduced
fb62e7a12be6593a5432fba4a9e4468c34feef5c
Fixed
107077d7fd6736711bf5cd980221723401d37c51
Database specific 
{
    "versions": [
        {
            "introduced": "4.95"
        },
        {
            "fixed": "4.97"
        }
    ]
}

Affected versions

exim-4.*
exim-4.95
exim-4.96
exim-4.96-RC0
exim-4.96-RC1
exim-4.96-RC2
exim-4.97-RC0
exim-4.97-RC1
exim-4.97-RC2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-3620.json"
unresolved_ranges 
[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "35"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "36"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "37"
            }
        ]
    }
]