CVE-2022-3559

HIGH
Published Oct 17, 20223y ago · Modified Jun 17, 20262w ago
7.5 CVSS 3.1
High
Find Similar
Published Oct 17, 2022 3y ago
Last Modified Jun 17, 2026 2w ago

Description

A vulnerability was found in Exim and classified as problematic. This issue affects some unknown processing of the component Regex Handler. The manipulation leads to use after free. The name of the patch is 4e9ed49f8f12eb331b29bd5b6dc3693c520fddc2. It is recommended to apply a patch to fix this issue. The identifier VDB-211073 was assigned to this vulnerability.

CVSS Details

Base Score
7.5
Exploitability
3.9
Impact
3.6
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

No active exploitation signals — not in CISA KEV and no EPSS score yet.

Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 2

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer Memory Safety
CWE-416 Use After Free Memory Safety

Affected Products 4

VendorProductVersionRange
eximexim* <4.97
fedoraprojectfedora35any
fedoraprojectfedora36any
fedoraprojectfedora37any

References 7

  • bugs.exim.org https://bugs.exim.org/show_bug.cgi?id=2915
    PatchVendor Advisory
  • git.exim.org https://git.exim.org/exim.git/commit/4e9ed49f8f12eb331b29bd5b6dc3693c520fddc2
    PatchVendor Advisory
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2024/10/msg00029.html
  • lists.fedoraproject.org https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EIH4W5R7SHTUEQFWWKB4TUO5YFZX64KV/
    Mailing ListThird Party Advisory
  • lists.fedoraproject.org https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TMQ6OCKPNPBPSD37YR4FOWV2R54M2UEP/
    Mailing ListThird Party Advisory
  • lists.fedoraproject.org https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WFHLZVHNNO2GWYP5EA4TZQZ5O4GVPARR/
    Mailing ListThird Party Advisory
  • vuldb.com https://vuldb.com/?id.211073
    Third Party Advisory

Remediation

  • bugs.exim.org https://bugs.exim.org/show_bug.cgi?id=2915
    PatchVendor Advisory
  • git.exim.org https://git.exim.org/exim.git/commit/4e9ed49f8f12eb331b29bd5b6dc3693c520fddc2
    PatchVendor Advisory