Integer Overflow Vulnerability in Exim Email Server

CVE-2020-28017

What is CVE-2020-28017?

The Exim Email Server, prior to version 4.94.2, contains a vulnerability that allows an integer overflow leading to a buffer overflow condition in the receive_add_recipient function. This can be triggered by a malicious email containing an excessively large recipient list, which may be up to fifty million recipients. Exploiting this vulnerability can lead to resource exhaustion, making remote exploitation challenging despite the severity of the issue.

References