Lucene search
UbuntuUSN-3565-1HistoryFeb 12, 2018 - 12:00 a.m.
Exim vulnerability
2018-02-1200:00:00
ubuntu.com
85
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
10
Confidence
High
EPSS
0.958
Percentile
99.5%
Releases
- Ubuntu 17.10
- Ubuntu 16.04 ESM
- Ubuntu 14.04 ESM
Packages
- exim4 - Exim is a mail transport agent
Details
Meh Chang discovered that Exim incorrectly handled memory in certain
decoding operations. A remote attacker could use this issue to cause Exim
to crash, resulting in a denial of service, or possibly execute arbitrary
code.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 17.10 | noarch | exim4-daemon-heavy | <Β 4.89-5ubuntu1.3 | UNKNOWN |
| Ubuntu | 17.10 | noarch | exim4 | <Β 4.89-5ubuntu1.3 | UNKNOWN |
| Ubuntu | 17.10 | noarch | exim4-base | <Β 4.89-5ubuntu1.3 | UNKNOWN |
| Ubuntu | 17.10 | noarch | exim4-base-dbgsym | <Β 4.89-5ubuntu1.3 | UNKNOWN |
| Ubuntu | 17.10 | noarch | exim4-config | <Β 4.89-5ubuntu1.3 | UNKNOWN |
| Ubuntu | 17.10 | noarch | exim4-daemon-heavy-dbgsym | <Β 4.89-5ubuntu1.3 | UNKNOWN |
| Ubuntu | 17.10 | noarch | exim4-daemon-light | <Β 4.89-5ubuntu1.3 | UNKNOWN |
| Ubuntu | 17.10 | noarch | exim4-daemon-light-dbgsym | <Β 4.89-5ubuntu1.3 | UNKNOWN |
| Ubuntu | 17.10 | noarch | exim4-dev | <Β 4.89-5ubuntu1.3 | UNKNOWN |
| Ubuntu | 17.10 | noarch | eximon4 | <Β 4.89-5ubuntu1.3 | UNKNOWN |
References
Related
redhatcve
redhatcve
CVE-2018-6789
2018-02-08 06:19:35
openvas
openvas
Debian: Security Advisory (DSA-4110-1)
2018-02-09 00:00:00
Debian: Security Advisory (DLA-1274-1)
2018-02-20 00:00:00
Exim < 4.90.1 RCE Vulnerability - Version Check
2018-03-08 00:00:00
exploitpack
exploitpack
exim 4.90 - Remote Code Execution
2018-10-24 00:00:00
Exim 4.90.1 - base64d Remote Code Execution
2018-05-02 00:00:00
prion
prion
Buffer overflow
2018-02-08 23:29:00
suse
suse
Security update for exim (important)
2018-02-19 12:08:51
Security update for exim (critical)
2021-05-20 00:00:00
Security update for exim (critical)
2021-05-07 00:00:00
osv
osv
CVE-2018-6789
2018-02-08 23:29:01
exim4 - security update
2018-02-10 00:00:00
exim4 - security update
2018-02-10 00:00:00
nessus
nessus
FreeBSD : exim -- a buffer overflow vulnerability, remote code execution (316b3c3e-0e98-11e8-8d41-97657151f8c2)
2018-02-12 00:00:00
openSUSE Security Update : exim (openSUSE-2018-170)
2018-02-20 00:00:00
Fedora 26 : exim (2018-25a7ba3cb6)
2018-02-27 00:00:00
fedora
fedora
[SECURITY] Fedora 27 Update: exim-4.90.1-2.fc27
2018-02-26 16:54:15
[SECURITY] Fedora 26 Update: exim-4.90.1-2.fc26
2018-02-26 15:45:26
hackerone
hackerone
Internet Bug Bounty: Exim off-by-one RCE vulnerability
2018-03-06 19:04:40
zdt
zdt
Exim base64d Buffer Overflow Exploit
2021-06-03 00:00:00
Exim < 4.90.1 - base64d Remote Code Execution Exploit
2018-05-02 00:00:00
exim 4.90 - Remote Code Execution Exploit
2018-10-24 00:00:00
attackerkb
attackerkb
Exim SMTP server RCE via base64d
2018-02-08 00:00:00
CVE-2018-6789
2018-02-08 00:00:00
Exim EHLO crash bug
2019-09-27 00:00:00
cve
cve
CVE-2018-6789
2018-02-08 23:29:01
cvelist
cvelist
CVE-2018-6789
2018-02-08 23:00:00
debian
debian
[SECURITY] [DSA 4110-1] exim4 security update
2018-02-10 18:35:51
[SECURITY] [DLA 1274-1] exim4 security update
2018-02-10 20:05:53
[SECURITY] [DSA 4110-1] exim4 security update
2018-02-10 18:35:51
alpinelinux
alpinelinux
CVE-2018-6789
2018-02-08 23:29:01
exploitdb
exploitdb
exim 4.90 - Remote Code Execution
2018-10-24 00:00:00
Exim < 4.90.1 - 'base64d' Remote Code Execution
2018-05-02 00:00:00
canvas
canvas
Immunity Canvas: EXIM_HEAP_OVERFLOW
2018-02-08 23:29:00
saint
saint
Exim SMTP listener base64d function one-character buffer overflow
2018-05-16 00:00:00
Exim SMTP listener base64d function one-character buffer overflow
2018-05-16 00:00:00
Exim SMTP listener base64d function one-character buffer overflow
2018-05-16 00:00:00
amazon
amazon
Critical: exim
2018-03-07 21:43:00
packetstorm
packetstorm
Exim base64d Remote Code Execution
2018-05-03 00:00:00
Exim 4.90 Remote Code Execution
2018-10-24 00:00:00
Exim base64d Buffer Overflow
2021-06-03 00:00:00
checkpoint_advisories
checkpoint_advisories
Exim Mail Server Buffer Overflow (CVE-2018-6789)
2020-10-21 00:00:00
seebug
seebug
Exim < 4.90.1 - base64d Remote Code ExecutionοΌCVE-2018-6789οΌ
2018-05-04 00:00:00
ubuntucve
ubuntucve
CVE-2018-6789
2018-02-07 00:00:00
archlinux
archlinux
[ASA-201802-6] exim: arbitrary code execution
2018-02-12 00:00:00
nvd
nvd
CVE-2018-6789
2018-02-08 23:29:01
freebsd
freebsd
exim -- a buffer overflow vulnerability, remote code execution
2018-02-05 00:00:00
cisa_kev
cisa_kev
Exim Buffer Overflow Vulnerability
2021-11-03 00:00:00
debiancve
debiancve
CVE-2018-6789
2018-02-08 23:29:01
myhack58
myhack58
gentoo
gentoo
Exim: Multiple vulnerabilities
2018-03-06 00:00:00
threatpost
threatpost
Bug Parade: NSA Warns on Cresting China-Backed Cyberattacks
2020-10-21 20:31:17
qualysblog
qualysblog
NSA Alert: Chinese State-Sponsored Actors Exploit Known Vulnerabilities
2020-10-22 23:10:29
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00
ics
ics
Potential for China Cyber Response to Heightened U.S.βChina Tensions
2020-10-20 12:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
10
Confidence
High
EPSS
0.958
Percentile
99.5%
Related for USN-3565-1