CVE-2020-28025

Publication date

2021-05-06 04:36:18

Family

mitre

State

PUBLISHED

Description

Exim 4 before 4.94.2 allows Out-of-bounds Read because pdkim_finish_bodyhash does not validate the relationship between sig->bodyhash.len and b->bh.len; thus, a crafted DKIM-Signature header might lead to a leak of sensitive information from process memory.