Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Exim Regex use after free

CVE-2022-3559 · published 4 years ago
Summary

A vulnerability was found in Exim and classified as problematic. This issue affects some unknown processing of the component Regex Handler. The manipulation leads to use after free. The name of the patch is 4e9ed49f8f12eb331b29bd5b6dc3693c520fddc2. It is recommended to apply a patch to fix this issu...

What to do
  • Update debian exim4 to version 4.96-4.
  • Update exim exim to version 4.97 or later.
Affected software
Ecosystem VendorProductAffected versions
– exim exim < 4.97
cpe:2.3:a:exim:exim:*:*:*:*:*:*:*:*
– fedoraproject fedora 35
36
37
cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
Debian:12 debian exim4 < 4.96-4
Fix: upgrade to 4.96-4
Original advisory text
Exim Regex use after free
A vulnerability was found in Exim and classified as problematic. This issue affects some unknown processing of the component Regex Handler. The manipulation leads to use after free. The name of the patch is 4e9ed49f8f12eb331b29bd5b6dc3693c520fddc2. It is recommended to apply a patch to fix this issue. The identifier VDB-211073 was assigned to this vulnerability.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
7.5 High
Exploitation
5% chance of attack within 30 days
Type
CWE-119Buffer Overflow
CWE-416Use After Free
Timeline
Published17 Oct 2022
Updated25 Oct 2026
First seen29 Sep 2026
Sources
CVE-2022-3559 · NVD
CVE-2022-3559 · OSV
DEBIAN-CVE-2022-3559 · OSV
Track software like this
Free during beta