EXIM VULNERABILITY AFFECTING 1.5M SERVERS LETS ATTACKERS ATTACH MALICIOUS FILES

Summary from the TLDR InfoSec newsletter

A new vulnerability with a CVSS score of 9.1 allows attackers to bypass attachment extension blocking and deliver executables to victims has been discovered. The vulnerability stems from an error in the way Exim parses multiline headers. Researchers have found that more than 1.5M email servers run vulnerable versions of Exim.