CVE-2022-3559: 
Exim vulnerability analysis and mitigation

A use-after-free vulnerability was discovered in Exim's Regex Handler component, identified as CVE-2022-3559. The vulnerability was found in October 2022 and affects the processing of regular expressions in Exim mail transfer agent. The issue was addressed with patch 4e9ed49f8f12eb331b29bd5b6dc3693c520fddc2 (Exim Bug, Exim Git).

The vulnerability manifests as a use-after-free condition in the Regex Handler component when processing regular expressions, particularly during SMTP connections handling multiple messages in the same session. The issue occurs specifically when regex variables are accessed after being freed during SMTP connection resets (Exim Bug).

When exploited, this vulnerability could lead to unexpected system behavior and potential crashes of the Exim mail server. The issue particularly affects scenarios where multiple messages are processed in the same SMTP connection, potentially disrupting mail service operations (Debian Security).

The vulnerability requires specific conditions to be exploited, particularly involving the processing of multiple messages within the same SMTP connection. While the vulnerability was confirmed through testing, there were no reported instances of exploitation in the wild (Exim Bug).

The issue was fixed in various Exim versions across different distributions. Fedora released updates 4.96-4.fc35, 4.96-4.fc36, and 4.96-5.fc37 to address this vulnerability. Debian also provided fixes in versions 4.94.2-7+deb11u4 for bullseye and 4.96-15+deb12u5 for bookworm (Fedora Update, Debian Security).