| Titolo | CVE-2020-28020 |
|---|
| Descrizione | Hi just an update on this Exim vulnerability. Sophos products like the UTM-SG and UTM-XG's all seem affected might be good to link them as an affected vendor for users that only monitor specific technology types.
Dear Sophos Customer,
On May 4, 2021, Qualys released a security advisory disclosing multiple CVEs, for the Exim mailer software, a widely used open-source message transfer agent (MTA). These CVEs are commonly referred to as 21Nails. Exim is used by Sophos Firewall as a part of the Email Protection functionality.
Sophos Firewall customers are not impacted if Email Protection is not licensed, or if Email Protection is used in Legacy Mode (Transparent Email Proxy).
On May 11, 2021, Sophos released a hotfix for Sophos Firewall version 17.5 MR4 and later. Customers on a release lower than version 17.5 MR4 should upgrade to the latest 17.5 MR or Sophos Firewall version 18.
The hotfix remediates the vulnerabilities by upgrading the Exim version to 4.94.2. It is automatically applied to Sophos Firewalls with the “Allow automatic installation of hotfixes” feature enabled. Enabled is the default setting.
More information can be found on the Sophos Community Security Blog.
Best regards,
Your Sophos Team
|
|---|
| Fonte | ⚠️ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28020 |
|---|
| Utente | csatechnical (UID 15632) |
|---|
| Sottomissione | 13/05/2021 00:46 (5 anni fa) |
|---|
| Moderazione | 13/05/2021 06:39 (6 hours later) |
|---|
| Stato | Duplicato |
|---|
| Voce VulDB | 174531 [Exim fino a 4.91 receive_msg buffer overflow] |
|---|
| Punti | 0 |
|---|