UnratedFix available
exim: Fix of CVE-2026-94054
Type: advisorySources: OSV
- CVE-2026-94054: in proxy_protocol_setup(), size the copy of the PROXY v1 header line by its own NUL-terminated length instead of the raw byte count read from the socket, so the following memchr() cannot read past the allocation and the CR terminator cannot be written outside it
- Products
- exim, exim-greylist, exim-mon, exim-mysql, exim-pgsql
- Affected versions
- Not specified
- Fixed versions
- 4.99.5-1.el8.tuxcare.els2
- CVEs
- CVE-2026-94054
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 11:16 UTC · Revision 1
Source evidence
- CVE-2026-94054: in proxy_protocol_setup(), size the copy of the PROXY v1 header line by its own NUL-terminated length instead of the raw byte count read from the socket, so the following memchr() cannot read past the allocation and the CR terminator cannot be written outside it
osv:CLSA-2026-1790290858
exim
Fixed versions: 4.99.5-1.el8.tuxcare.els2
exim-greylist
Fixed versions: 4.99.5-1.el8.tuxcare.els2
exim-mon
Fixed versions: 4.99.5-1.el8.tuxcare.els2
exim-mysql
Fixed versions: 4.99.5-1.el8.tuxcare.els2
exim-pgsql
Fixed versions: 4.99.5-1.el8.tuxcare.els2
Complete source record
{
"id": "a5331edb8b583e7ae477d0c7c3883899b36387b186830b6040d2198b18a00636",
"url": "https://osv.dev/vulnerability/CLSA-2026-1790290858",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "exim: Fix of CVE-2026-94054",
"summary": "- CVE-2026-94054: in proxy_protocol_setup(), size the copy of the PROXY v1 header line by its own NUL-terminated length instead of the raw byte count read from the socket, so the following memchr() cannot read past the allocation and the CR terminator cannot be written outside it",
"evidence": "osv:CLSA-2026-1790290858",
"products": [
{
"name": {
"value": "exim",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.99.5-1.el8.tuxcare.els2",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "exim-greylist",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.99.5-1.el8.tuxcare.els2",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "exim-mon",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.99.5-1.el8.tuxcare.els2",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "exim-mysql",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.99.5-1.el8.tuxcare.els2",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "exim-pgsql",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.99.5-1.el8.tuxcare.els2",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "CLSA-2026-1790290858",
"aliases": [
"CLSA-2026-1790290858"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.99.5-1.el8.tuxcare.els2"
}
]
}
],
"package": {
"name": "exim",
"purl": "pkg:rpm/tuxcare/exim?distro=centos-8.5",
"ecosystem": "TuxCare:CentOS:8.5"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2026-1790290858.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.99.5-1.el8.tuxcare.els2"
}
]
}
],
"package": {
"name": "exim-greylist",
"purl": "pkg:rpm/tuxcare/exim-greylist?distro=centos-8.5",
"ecosystem": "TuxCare:CentOS:8.5"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2026-1790290858.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.99.5-1.el8.tuxcare.els2"
}
]
}
],
"package": {
"name": "exim-mon",
"purl": "pkg:rpm/tuxcare/exim-mon?distro=centos-8.5",
"ecosystem": "TuxCare:CentOS:8.5"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2026-1790290858.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.99.5-1.el8.tuxcare.els2"
}
]
}
],
"package": {
"name": "exim-mysql",
"purl": "pkg:rpm/tuxcare/exim-mysql?distro=centos-8.5",
"ecosystem": "TuxCare:CentOS:8.5"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2026-1790290858.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.99.5-1.el8.tuxcare.els2"
}
]
}
],
"package": {
"name": "exim-pgsql",
"purl": "pkg:rpm/tuxcare/exim-pgsql?distro=centos-8.5",
"ecosystem": "TuxCare:CentOS:8.5"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2026-1790290858.json"
}
}
],
"modified": "2026-10-26T09:31:51.518199158Z",
"provider": "osv",
"upstream": [
"CVE-2026-94054"
],
"references": [
"https://errata.tuxcare.com/els_os/centos8.5els/CLSA-2026-1790290858.html",
"https://nvd.nist.gov/vuln/detail/CVE-2026-94054"
]
},
"related_cves": [
{
"value": "CVE-2026-94054",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 448715,
"published_at": "2026-09-24T23:01:08+00:00"
}