Re: [exim] CVE-2022-37452

Wed, 24 Aug 2022 09:27:45 -0700 

Am 24.08.22 um 18:14 schrieb Jeremy Harris via Exim-users:

On 24/08/2022 16:45, Ken Olum via Exim-users wrote:

How serious is CVE-2022-37452: buffer overflow for the alias list in
host_name_lookup? 

The associated bug, 2747, reported it as a segfault in the receive
process.



Besides the real impact here, if a CVE number has been assigned, and 
it's reasonable to assume it's correct,

it should be mentioned in the security section, don't you agree?

Best regards,
Marius





Attachment:
OpenPGP_0x048770A738345DD3.asc

Description: OpenPGP public key



Attachment:
OpenPGP_signature

Description: OpenPGP digital signature


-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/






















					Reply via email to