Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/exim4@4.96-15%2Bdeb12u7
purl pkg:deb/debian/exim4@4.96-15%2Bdeb12u7
Next non-vulnerable version 4.96-15+deb12u8
Latest non-vulnerable version 4.99.1-1~bpo13+1
Risk 3.0
Vulnerabilities affecting this package (4)
Vulnerability Summary Fixed by
VCID-gdsh-48ys-33ew
Aliases:
CVE-2026-40684
4.99.2-1
Affected by 0 other vulnerabilities.
4.96-15+deb12u8
Affected by 0 other vulnerabilities.
4.98.2-1~bpo12+1
Affected by 0 other vulnerabilities.
4.98.2-1+deb13u1
Affected by 0 other vulnerabilities.
4.99.1-1~bpo13+1
Affected by 0 other vulnerabilities.
4.99.1-4
Affected by 0 other vulnerabilities.
4.99.1-6
Affected by 0 other vulnerabilities.
VCID-huhp-241r-jbf6
Aliases:
CVE-2026-40685
4.99.2-1
Affected by 0 other vulnerabilities.
4.96-15+deb12u8
Affected by 0 other vulnerabilities.
4.98.2-1~bpo12+1
Affected by 0 other vulnerabilities.
4.98.2-1+deb13u1
Affected by 0 other vulnerabilities.
4.99.1-1~bpo13+1
Affected by 0 other vulnerabilities.
4.99.1-4
Affected by 0 other vulnerabilities.
4.99.1-6
Affected by 0 other vulnerabilities.
VCID-hy1a-tah2-27gq
Aliases:
CVE-2026-40686
4.99.2-1
Affected by 0 other vulnerabilities.
4.96-15+deb12u8
Affected by 0 other vulnerabilities.
4.98.2-1~bpo12+1
Affected by 0 other vulnerabilities.
4.98.2-1+deb13u1
Affected by 0 other vulnerabilities.
4.99.1-1~bpo13+1
Affected by 0 other vulnerabilities.
4.99.1-4
Affected by 0 other vulnerabilities.
4.99.1-6
Affected by 0 other vulnerabilities.
VCID-ry9v-ge65-sqbb
Aliases:
CVE-2026-40687
4.96-15+deb12u8
Affected by 0 other vulnerabilities.
4.98.2-1~bpo12+1
Affected by 0 other vulnerabilities.
4.98.2-1+deb13u1
Affected by 0 other vulnerabilities.
4.99.1-1~bpo13+1
Affected by 0 other vulnerabilities.
4.99.1-4
Affected by 0 other vulnerabilities.
4.99.1-6
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (4)
Vulnerability Summary Aliases
VCID-5e2k-ure4-wfdf Multiple vulnerabilities have been discovered in Exim, the worst of which can lead to remote code execution. CVE-2023-42117
VCID-6dwr-t9kn-2yfn A vulnerability was found in Exim and classified as problematic. This issue affects some unknown processing of the component Regex Handler. The manipulation leads to use after free. The name of the patch is 4e9ed49f8f12eb331b29bd5b6dc3693c520fddc2. It is recommended to apply a patch to fix this issue. The identifier VDB-211073 was assigned to this vulnerability. CVE-2022-3559
VCID-m8mt-ya9x-yqaq The STARTTLS feature in Exim through 4.94.2 allows response injection (buffering) during MTA SMTP sending. CVE-2021-38371
VCID-puuy-w6ze-9kc7 Multiple vulnerabilities have been discovered in Exim, the worst of which can lead to remote code execution. CVE-2023-42119

Date Actor Action Vulnerability Source VulnerableCode Version
2026-05-04T01:43:46.880755+00:00 Debian Oval Importer Fixing VCID-puuy-w6ze-9kc7 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0
2026-05-03T19:36:25.619481+00:00 Debian Oval Importer Fixing VCID-5e2k-ure4-wfdf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0
2026-05-03T17:42:36.720416+00:00 Debian Oval Importer Fixing VCID-6dwr-t9kn-2yfn https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0
2026-05-03T16:25:06.611249+00:00 Debian Oval Importer Fixing VCID-m8mt-ya9x-yqaq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0
2026-05-02T03:48:24.407952+00:00 Debian Importer Affected by VCID-ry9v-ge65-sqbb https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-05-02T02:32:53.541541+00:00 Debian Importer Affected by VCID-gdsh-48ys-33ew https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-05-02T01:31:48.558724+00:00 Debian Importer Affected by VCID-huhp-241r-jbf6 https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-05-02T00:57:02.226618+00:00 Debian Importer Affected by VCID-hy1a-tah2-27gq https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-04-16T00:56:58.695969+00:00 Debian Oval Importer Fixing VCID-puuy-w6ze-9kc7 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T19:16:40.435433+00:00 Debian Oval Importer Fixing VCID-5e2k-ure4-wfdf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T17:31:06.670227+00:00 Debian Oval Importer Fixing VCID-6dwr-t9kn-2yfn https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T16:19:45.475821+00:00 Debian Oval Importer Fixing VCID-m8mt-ya9x-yqaq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-12T00:29:17.168694+00:00 Debian Oval Importer Fixing VCID-puuy-w6ze-9kc7 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T19:00:06.611315+00:00 Debian Oval Importer Fixing VCID-5e2k-ure4-wfdf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T17:17:27.972979+00:00 Debian Oval Importer Fixing VCID-6dwr-t9kn-2yfn https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T16:07:04.478803+00:00 Debian Oval Importer Fixing VCID-m8mt-ya9x-yqaq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-08T23:59:39.190399+00:00 Debian Oval Importer Fixing VCID-puuy-w6ze-9kc7 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T18:44:37.502810+00:00 Debian Oval Importer Fixing VCID-5e2k-ure4-wfdf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T17:06:00.603534+00:00 Debian Oval Importer Fixing VCID-6dwr-t9kn-2yfn https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T15:59:45.222263+00:00 Debian Oval Importer Fixing VCID-m8mt-ya9x-yqaq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0