Logo
vulnerabilityCVE-2026-40684
Name
CVE-2026-40684
Source
NVD ( link)Debian ( link)
Description
In Exim before 4.99.2, on systems using musl libc (not glibc), an attacker can crash the connection instance when malformed DNS data is present in PTR records. This is caused by a dn_expand oddity in octal printing.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
exim
Exploitable

Vulnerability Ratings#


5.9
CVSSv31
7.5
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
4.99.4
Not Affected
buildroot
master
4.99.4
Not Affected
openwrt
master
4.99.4-r1
Not Affected