CVE-2021-38371 Other in n/a

What is CVE-2021-38371?

CVE-2021-38371 is a high-severity vulnerability in Exim Exim, published on 10 Aug 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

The STARTTLS feature in Exim through 4.94.2 allows response injection (buffering) during MTA SMTP sending.

Weakness: CWE-74

Which versions are affected by CVE-2021-38371?

It affects 1 product.

Products include Exim Exim.

How do I fix CVE-2021-38371?

Upgrade to a fixed version.

Is CVE-2021-38371 being exploited?

There is no known exploitation of CVE-2021-38371 in the wild and no public exploit code.

Other vulnerabilities in Exim Exim

• CVE-2026-45185 Use after free in Exim Critical 9.8
• CVE-2023-42115 Exim AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability Critical 9.8
• CVE-2020-28017 Integer overflow in n/a Critical 9.8
• CVE-2020-28018 Use after free in n/a Critical 9.8
• CVE-2020-28020 Integer overflow in n/a Critical 9.8

All Exim Exim vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as CLSA-2023-1687794906, CLSA-2023-1687795205, CLSA-2023-1687795531, CLSA-2023-1688070370, DEBIAN-CVE-2021-38371, GHSA-8gh2-336j-g8v7 and 2 more.