In Exim before 4.99.2, when the SPA authentication driver is used with an adversarial SPA resource, there can be an out-of-bounds write that crashes the connection instance, or erroneous data processing that divulges data from uninitialized heap memory.
4.92.1-1ubuntu34.92.1-1ubuntu44.93-11ubuntu14.93-12ubuntu14.93-13ubuntu14.93-13ubuntu1.14.93-13ubuntu1.104.93-13ubuntu1.114.93-13ubuntu1.124.93-13ubuntu1.5+6 more4.95-4ubuntu2.74.97-4ubuntu4.44.98.2-1ubuntu2.14.99.1-1ubuntu1.14.80-7ubuntu34.80-7ubuntu44.80-9ubuntu14.80-9ubuntu24.82-3ubuntu14.82-3ubuntu24.82-3ubuntu2.14.82-3ubuntu2.24.82-3ubuntu2.34.82-3ubuntu2.4+7 more4.86-3ubuntu14.86-7ubuntu14.86-7ubuntu24.86-7ubuntu34.86.2-2ubuntu14.86.2-2ubuntu24.86.2-2ubuntu2.14.86.2-2ubuntu2.24.86.2-2ubuntu2.34.86.2-2ubuntu2.4+9 more4.89-5ubuntu14.89-9ubuntu14.89-9ubuntu24.89-9ubuntu34.89-9ubuntu44.90.1-1ubuntu14.90.1-1ubuntu1.14.90.1-1ubuntu1.104.90.1-1ubuntu1.10+esm14.90.1-1ubuntu1.10+esm2+9 moreExploitability
AV:NAC:HPR:NUI:NScope
S:UImpact
C:LI:NA:LCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L