CVE-2020-28019

score

<0.1

cvss

7.5

epss

61.7%

published

2021-05-06

kev added

—

first seen

2026-10-21

Exim 4 < 4.94.2 contains an improper initialization caused by mishandling of getc functions when a client uses BDAT instead of DATA, letting attackers cause recursion-based stack consumption or other issues, exploit requires sending BDAT commands.