CVE-2021-38371

HIGH7.5EPSS 2.2%

exim4 - security update

Published: 8/10/2021Modified: 4/28/2026

Description

The STARTTLS feature in Exim through 4.94.2 allows response injection (buffering) during MTA SMTP sending.

Affected packages (2)

CVSS scores

SourceVersionSeverityVector
osvCVSS 3.1HIGH7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

References (1)