CVE-2020-28020: Exim 4 before 4.92 allows Integer Overflow to Buffer Overflow, in which an unauthenticated remote attacker...

Security readout for executives and security teams

This is a remote code execution flaw in Exim mail server versions before 4.92. An unauthenticated attacker could trigger memory corruption through specially handled email header continuation lines. Because Exim often sits directly on the internet as mail infrastructure, affected systems should be treated as high business risk. Organizations running Exim versions before 4.92, especially internet-facing SMTP servers, are the likely exposure. The source bundle does not provide package-specific affected ranges or CPEs. Treat this as urgent for any internet-facing Exim deployment. The business risk is highest where mail servers run outdated Exim and accept unauthenticated SMTP traffic from the internet. Mitigation focus: Upgrade Exim to 4.92 or later according to vendor guidance.; Review Exim security advisory details for this CVE.; Apply distribution package updates for Exim where available..

Prepared

Jun 2, 2026, 19:53 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.