🕵️ CVE-2022-37452 | Exim up to 4.94 Alias List host.c host_name_lookup sender_host_name heap-based overflow (DLA 3082-1)

A vulnerability, which was classified as critical, has been found in Exim up to 4.94. Affected by this issue is the function host_name_lookup of the file host.c of the component Alias List Handler. The manipulation of the argument sender_host_name leads to heap-based buffer overflow. This vulnerability is handled as CVE-2022-37452. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component. ...