CVE-2018-6789
KEV RANSOMWARECRITICAL 9.8EPSS 82.1%
An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By sending a handcrafted message, a buffer overflow may happen. This can be used to execute code remotely.
- CVSS v3.1
- 9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS v3.1
- 9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS v2.0
- 7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P - EPSS
- 82.14% chance of exploitation in the next 30 days, 100th percentile
- CISA KEV
- added 2021-11-03, used in ransomware campaigns
- Published
- 2018-02-08
- Updated
- 2025-10-21
Proof-of-concept exploits (7)
- http://packetstormsecurity.com/files/162959/Exim-base64d-Buffer-Overflow.html
- Stab1el/BAGUA13★ · 2023-06-15
- beraphin/CVE-2018-67893★ · 2020-03-06
- c0llision/exim-vuln-poc0★ · 2018-05-03
- martinclauss/exim-rce-cve-2018-678911★ · 2026-07-15
- synacktiv/Exim-CVE-2018-678910★ · 2019-10-10
- thistehneisen/CVE-2018-6789-Python32★ · 2023-08-05