CVE-2020-28022

score

<0.1

cvss

9.8

epss

3.0%

published

2021-05-06

kev added

—

first seen

2026-10-21

Exim 4 < 4.94.2 contains a buffer overflow caused by improper restriction of write operations within memory bounds when processing name=value pairs in MAIL FROM and RCPT TO commands, letting remote attackers cause denial of service or execute arbitrary code, exploit requires sending crafted SMTP commands.