Vulners
Lucene search
CVE-2017-16944
🗓️ 25 Nov 2017 17:00:00Reported by mitreType 
cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 326 Views🌐 WEB
| Reporter | Title | Published | Views | Family All 58 |
|---|---|---|---|---|
 | Exim 4.89 - BDAT Denial of Service Exploit | 27 Nov 201700:00 | – | zdt |
 | exim -- remote DoS attack in BDAT processing | 23 Nov 201700:00 | – | freebsd |
 | Critical: exim | 20 Dec 201700:00 | – | amazon |
 | Amazon Linux AMI : exim (ALAS-2017-932) | 26 Dec 201700:00 | – | nessus |
| Debian DSA-4053-1 : exim4 - security update | 1 Dec 201700:00 | – | nessus |
| Fedora 26 : exim (2017-0032baa7d7) | 13 Dec 201700:00 | – | nessus |
| Fedora 27 : exim (2017-0053bb9719) | 15 Jan 201800:00 | – | nessus |
| FreeBSD : exim -- remote DoS attack in BDAT processing (75dd622c-d5fd-11e7-b9fe-c13eb7bcbf4f) | 1 Dec 201700:00 | – | nessus |
| GLSA-201803-01 : Exim: Multiple vulnerabilities | 7 Mar 201800:00 | – | nessus |
| openSUSE Security Update : exim (openSUSE-2021-677) (Stack Clash) | 18 May 202100:00 | – | nessus |
10
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| BDAT command handling (SIZE/LAST) | path | https://github.com/Exim/exim/blob/e924c08b7d031b712013a7a897e2d430b302fe6c/src/src/receive.c#L1817 | Use-after-free in receive_msg during BDAT processing leading to potential RCE (CVE-2017-16943) | CWE-835 |
| store_extend/receive_msg path where BDAT data is processed | path | https://github.com/Exim/exim/blob/e924c08b7d031b712013a7a897e2d430b302fe6c/src/src/receive.c#L1817 | Use-after-free in receive_msg during BDAT processing leading to potential RCE (CVE-2017-16943) | CWE-835 |
| BDAT command parsing and data handling (BDAT_CMD) | path | https://github.com/Exim/exim/blob/e924c08b7d031b712013a7a897e2d430b302fe6c/src/src/smtp_in.c#L628 | Incorrect BDAT data handling causing DoS (infinite loop/stack exhaustion) (CVE-2017-16944) | CWE-835 |
| BDAT data read and error handling in bdat_getc | path | https://github.com/Exim/exim/blob/e924c08b7d031b712013a7a897e2d430b302fe6c/src/src/smtp_in.c#L628 | Incorrect BDAT data handling causing DoS (infinite loop/stack exhaustion) (CVE-2017-16944) | CWE-835 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 01:10Current
6.4Medium risk
Vulners AI Score6.4
CVSS 25
CVSS 37.5
EPSS0.6332