© 2026 vulntracker.io

CVE-2011-1764

N/A

Published: October 5, 2011 at 01:00 AM UTC

Updated: June 16, 2026 at 11:29 PM UTC

1 product affected across 1 vendorExim

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 4%

Description

Format string vulnerability in the dkim_exim_verify_finish function in src/dkim.c in Exim before 4.76 might allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via format string specifiers in data used in DKIM logging, as demonstrated by an identity field containing a % (percent) character.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

95%

v ≤ 4.752.10 2.11 2.12 3.00 3.01 3.02 3.03 3.10 3.11 3.12 3.13 3.14 3.15 3.16 3.20 3.21 3.22 3.30 3.31 3.32 3.33 3.34 3.35 3.36 4.00 4.01 4.02 4.03 4.04 4.05 4.10 4.11 4.12 4.14 4.20 4.21 4.22 4.23 4.24 4.30 4.31 4.32 4.33 4.34 4.40 4.41 4.42 4.43 4.44 4.50 4.51 4.52 4.53 4.54 4.60 4.61 4.62 4.63 4.64 4.65 4.66 4.67 4.68 4.69 4.70 4.71 4.72 4.73 4.74

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (7)

x_refsource_CONFIRMPatch

Source: [email protected]

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=624670

x_refsource_CONFIRMPatch

Source: [email protected]

http://bugs.exim.org/show_bug.cgi?id=1106

x_refsource_CONFIRMPatch

Source: [email protected]

http://git.exim.org/exim.git/commit/337e3505b0e6cd4309db6bf6062b33fa56e06cf8

Vendor Advisoryx_refsource_SUSE

Source: [email protected]

http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html

Third Party Advisoryx_refsource_SECUNIA

Source: [email protected]

http://secunia.com/advisories/51155

Vendor Advisoryx_refsource_DEBIAN

Source: [email protected]

http://www.debian.org/security/2011/dsa-2232

x_refsource_CONFIRMPatch

Source: [email protected]

https://bugzilla.redhat.com/show_bug.cgi?id=702474

CVSS

7.5HIGH[email protected]

Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-134

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card