Exim Patch Failure SQL Injection Spurs Overflows

A recently disclosed advisory has exposed critical vulnerabilities in Exim, one of the most widely deployed mail transfer agents, stemming from an Exim patch failure. Security researchers, including Andrew Fasano of the National Institute of Standards and Technology, detailed how a flawed fix and SQL injection flaw opened the door to severe heap overflows, putting millions of systems at risk.

At the center of the report are five registered CVEs: CVE-2025-67896, CVE-2025-6965, CVE-2025-30232, CVE-2025-26794, and CVE-2023-42115. These issues range in impact but together highlight systemic concerns with the patching process. In at least one case, a previously issued patch failed to resolve the underlying issue and may have introduced more instability.

The advisory warns administrators to remain alert and review configurations carefully. Without urgent action, attackers could exploit the flaws for remote code execution.

Read the full technical breakdown here:

Exim’s Poisoned Record: How a Failed Patch and SQL Injection Lead to Critical Heap Overflows