CVE-2020-28017

score

<0.1

cvss

9.8

epss

36.9%

published

2021-05-06

kev added

—

first seen

2026-10-21

Exim 4 < 4.94.2 contains an integer overflow caused by processing an email message with fifty million recipients in receive_add_recipient, potentially leading to a buffer overflow, letting attackers cause denial of service or execute arbitrary code, exploit requires sending a specially crafted email with a large number of recipients.