Details of a critical vulnerability in Exim have been disclosed
A corrective release of Exim 4.92.2 has been published to fix a critical vulnerability (CVE-2019-15846) that, in the default configuration, could allow remote code execution by an attacker with root privileges. The issue only appears when TLS support is enabled and is exploited by passing a specially crafted client certificate or a modified value in SNI. The vulnerability was identified by Qualys. The problem exists in the special character escaping handler […]
