CVE-2026-45185: Use After Free
Exim before 4.99.3, in certain GnuTLS configurations, has a remotely reachable use-after-free in the BDAT body parsing path. It is triggered when a client sends a TLS close_notify mid-body during a CHUNKING transfer, followed by a final cleartext byte on the same TCP connection. This can lead to heap corruption. An unauthenticated network attacker exploiting this vulnerability could execute arbitrary code.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-45185?
CVE-2026-45185 has been classified with a high severity rating due to its potential for remote exploitation.
How do I fix CVE-2026-45185?
To mitigate CVE-2026-45185, upgrade Exim to version 4.99.3 or later where the vulnerability is addressed.
What are the potential consequences of CVE-2026-45185?
Exploitation of CVE-2026-45185 may lead to denial of service or remote code execution on affected Exim email servers.
Which versions of Exim are affected by CVE-2026-45185?
Exim versions prior to 4.99.3 are affected by CVE-2026-45185.
Can CVE-2026-45185 be exploited remotely?
Yes, CVE-2026-45185 can be exploited remotely if certain GnuTLS configurations are in use.