CVE-2026-40684
MEDIUM SEVERITYCVSS Score & Metrics
Base Score
5.9 / 10
Vector String
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Vulnerability Description
In Exim before 4.99.2, on systems using musl libc (not glibc), an attacker can crash the connection instance when malformed DNS data is present in PTR records. This is caused by a dn_expand oddity in octal printing.
Vulnerability Details
Published Date
Last Modified
CWE ID
CWE-684
Source
NVD
Vendor
Exim
Product
Exim
Discussion (0)
Add Comment
No comments yet. Be the first!