ID de Prueba:	1.3.6.1.4.1.25623.1.0.150758
Categoría:	Denial of Service
Título:	Exim < 4.96 Invalid Free Vulnerability
Resumen:	Exim is prone to an invalid free vulnerability.
Descripción:	Summary: Exim is prone to an invalid free vulnerability. Vulnerability Insight: Exim has an invalid free in pam_converse in auths/call_pam.c because store_free is not used after store_malloc. Affected Software/OS: Exim version 4.95 and prior. Solution: Update to version 4.96 or later. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2022-37451 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LETR5CVDPFOFQHXCJP6NFLG52JZHQYDY/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XSWDF4QEXD4TDWQLYQOWCHBJKTDQR4Z7/ https://cwe.mitre.org/data/definitions/762.html https://github.com/Exim/exim/commit/51be321b27825c01829dffd90f11bfff256f7e42 https://github.com/Exim/exim/compare/exim-4.95...exim-4.96 https://github.com/Exim/exim/wiki/EximSecurity https://github.com/ivd38/exim_invalid_free https://lists.exim.org/lurker/message/20220625.141825.d6de6074.en.html https://www.exim.org/static/doc/security/ https://www.openwall.com/lists/oss-security/2022/08/06/1
Copyright	Copyright (C) 2022 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.