Live › vulnerability › CVE-2018-6789
Go to dashboardExim's SMTP listener has a buffer overflow in its base64d function, which an unauthenticated remote sender can trigger. The flaw may allow remote code execution on the mail server.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Exim Exim | vendor | – | – |
Run exim -bV to see the installed version and compare it with the fixed release in the vendor advisory.
Upgrade Exim to a release that includes the vendor fix; CISA directs federal users to apply the vendor update.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Exim contains a buffer overflow vulnerability in the base64d function part of the SMTP listener that may allow for remote code execution.
CISA required action: Apply updates per vendor instructions.
This page as .md · .json · in your agent: get_signal("CVE-2018-6789")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.