Vulnerabilities > CVE-2022-37451 - Release of Invalid Pointer or Reference vulnerability in multiple products

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

exim

fedoraproject

CWE-763

NVD

Published: 2022-08-06

Updated: 2023-11-07

Summary

Exim before 4.96 has an invalid free in pam_converse in auths/call_pam.c because store_free is not used after store_malloc.

Vulnerable Configurations

Part	Description	Count
Application	Exim Exim Exim - Exim Exim 2.10 Exim Exim 2.11 Exim Exim 2.12 Exim Exim 3.00 Exim Exim 3.01 Exim Exim 3.02 Exim Exim 3.03 Exim Exim 3.10 Exim Exim 3.11 Exim Exim 3.12 Exim Exim 3.13 Exim Exim 3.14 Exim Exim 3.15 Exim Exim 3.16 Exim Exim 3.20 Exim Exim 3.21 Exim Exim 3.22 Exim Exim 3.30 Exim Exim 3.31 Exim Exim 3.32 Exim Exim 3.33 Exim Exim 3.34 Exim Exim 3.35 Exim Exim 3.36 Exim Exim 4.00 Exim Exim 4.01 Exim Exim 4.02 Exim Exim 4.03 Exim Exim 4.04 Exim Exim 4.05 Exim Exim 4.10 Exim Exim 4.11 Exim Exim 4.12 Exim Exim 4.14 Exim Exim 4.20 Exim Exim 4.21 Exim Exim 4.22 Exim Exim 4.23 Exim Exim 4.24 Exim Exim 4.30 Exim Exim 4.31 Exim Exim 4.32 Exim Exim 4.33 Exim Exim 4.34 Exim Exim 4.40 Exim Exim 4.41 Exim Exim 4.42 Exim Exim 4.43 Exim Exim 4.44 Exim Exim 4.50 Exim Exim 4.51 Exim Exim 4.52 Exim Exim 4.53 Exim Exim 4.54 Exim Exim 4.60 Exim Exim 4.61 Exim Exim 4.62 Exim Exim 4.63 Exim Exim 4.64 Exim Exim 4.65 Exim Exim 4.66 Exim Exim 4.67 Exim Exim 4.68 Exim Exim 4.69 Exim Exim 4.70 Exim Exim 4.71 Exim Exim 4.72 Exim Exim 4.73 Exim Exim 4.74 Exim Exim 4.75 Exim Exim 4.76 Exim Exim 4.77 Exim Exim 4.80 Exim Exim 4.80.1 Exim Exim 4.82 Exim Exim 4.82.1 Exim Exim 4.84.2 Exim Exim 4.85 Exim Exim 4.85.1 Exim Exim 4.85.2 Exim Exim 4.86 Exim Exim 4.86.1 Exim Exim 4.86.2 Exim Exim 4.87 Exim Exim 4.87.1 Exim Exim 4.88 Exim Exim 4.89 Exim Exim 4.89.1 Exim Exim 4.90 Exim Exim 4.90.0.22 Exim Exim 4.90.0.27 Exim Exim 4.90.1 Exim Exim 4.91 Exim Exim 4.92 Exim Exim 4.92.1 Exim Exim 4.92.2 Exim Exim 4.93 Exim Exim 4.93.0.4 Exim Exim 4.93.0.4-3.1 Exim Exim 4.94 Exim Exim 4.94.1 Exim Exim 4.94.2 Exim Exim 4.95	152
OS	Fedoraproject Fedoraproject Fedora 35 Fedoraproject Fedora 36	2

Common Weakness Enumeration (CWE)

CWE-763 - Release of Invalid Pointer or Reference

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References