Exim before 4.95 has a heap-based buffer overflow for the alias list in hostnamelookup in host.c when senderhostname is set.
{ "vanir_signatures": [ { "digest": { "length": 5102.0, "function_hash": "28536930082922744431669009228752806909" }, "target": { "function": "host_name_lookup", "file": "src/src/host.c" }, "signature_type": "Function", "source": "https://github.com/exim/exim/commit/d4bc023436e4cce7c23c5f8bb5199e178b4cc743", "deprecated": false, "signature_version": "v1", "id": "CVE-2022-37452-017c0dcb" }, { "digest": { "line_hashes": [ "184956518010150729774220526949178823271", "26430828063158642321714243700460813138", "295790719658670483012353876179055914960", "32747649832266724423754114956411741680", "129856889769950454786719956308645125805", "1381192537488451988005309451666684435", "122093718510119773049399227896149530491", "201977030185216179548399135292226515147" ], "threshold": 0.9 }, "target": { "file": "src/src/host.c" }, "signature_type": "Line", "source": "https://github.com/exim/exim/commit/d4bc023436e4cce7c23c5f8bb5199e178b4cc743", "deprecated": false, "signature_version": "v1", "id": "CVE-2022-37452-8396ebb4" } ] }