CVE-2020-28020: Exim

Critical severity, CVSS 9.8. EPSS: 7.9% chance of exploitation in the next 30 days.

Exim 4 before 4.92 allows Integer Overflow to Buffer Overflow, in which an unauthenticated remote attacker can execute arbitrary code by leveraging the mishandling of continuation lines during header-length restriction.

Affected products

• Exim Exim: from 4.00, before 4.92 (fixed in 4.92)

Published 2021-05-06. Last modified 2026-06-17.