CVE-2022-3559

A vulnerability was found in Exim and classified as problematic. This issue affects some unknown processing of the component Regex Handler. The manipulation leads to use after free. The name of the patch is 4e9ed49f8f12eb331b29bd5b6dc3693c520fddc2. It is recommended to apply a patch to fix this issue. The identifier VDB-211073 was assigned to this vulnerability.

• CWE-119
• CWE-416

• https://bugs.exim.org/show_bug.cgi?id=2915Patch, Vendor Advisory
• https://git.exim.org/exim.git/commit/4e9ed49f8f12eb331b29bd5b6dc3693c520fddc2Patch, Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EIH4W5R7SHTUEQFWWKB4TUO5YFZX64KV/Mailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TMQ6OCKPNPBPSD37YR4FOWV2R54M2UEP/Mailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WFHLZVHNNO2GWYP5EA4TZQZ5O4GVPARR/Mailing List, Third Party Advisory
• https://vuldb.com/?id.211073Third Party Advisory
• https://bugs.exim.org/show_bug.cgi?id=2915Patch, Vendor Advisory
• https://git.exim.org/exim.git/commit/4e9ed49f8f12eb331b29bd5b6dc3693c520fddc2Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2024/10/msg00029.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EIH4W5R7SHTUEQFWWKB4TUO5YFZX64KV/Mailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TMQ6OCKPNPBPSD37YR4FOWV2R54M2UEP/Mailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WFHLZVHNNO2GWYP5EA4TZQZ5O4GVPARR/Mailing List, Third Party Advisory
• https://vuldb.com/?id.211073Third Party Advisory

Published

Oct 17, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-3558The Import and export users and customers WordPress plugin b…8
• CVE-2022-35582Penta Security Systems Inc WAPPLES 4.0.*, 5.0.0.*, 5.0.12.* …8.8
• CVE-2022-35583wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an att…9.8
• CVE-2022-35585A stored cross-site scripting (XSS) issue in the ForkCMS ver…4.8
• CVE-2022-35587A cross-site scripting (XSS) issue in the Fork version 5.9.3…4.8
• CVE-2022-35589A cross-site scripting (XSS) issue in the Fork version 5.9.3…4.8
• CVE-2022-35590A cross-site scripting (XSS) issue in the ForkCMS version 5.…4.8
• CVE-2022-35598A SQL injection vulnerability in ConnectionFactoryDAO.java i…9.8
• CVE-2022-35599A SQL injection vulnerability in Stocks.java in sazanrjb Inv…9.8
• CVE-2022-3560A flaw was found in pesign. The pesign package provides a sy…5.5
• CVE-2022-35601A SQL injection vulnerability in SupplierDAO.java in sazanrj…9.8
• CVE-2022-35602A SQL injection vulnerability in UserDAO.java in sazanrjb In…9.8