Exim.SMTP.Server.BDAT.Command.Memory.Corruption

Description

This indicates an attack attempt to exploit a Memory Corruption Vulnerability in Exim SMTP server.
The vulnerability is due to an error in the vulnerable application when handling a maliciously crafted message. A remote attacker may be able to exploit this to execute arbitrary code within the context of the system.

Affected Products

Exim 4 version 4.94.1 and prior

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Apply the most recent upgrade or patch from the vendor.
https://www.exim.org/static/doc/security/CVE-2020-qualys/CVE-2020-28019-BDATA.txt

References