Lucene search
UbuntuUSN-5741-1HistoryNov 24, 2022 - 12:00 a.m.
Exim vulnerability
2022-11-2400:00:00
ubuntu.com
105
exim
ubuntu
vulnerability
code execution
denial of service
regular expressions
mail transport agent
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
8.3
Confidence
High
EPSS
0.007
Percentile
80.2%
Releases
- Ubuntu 22.10
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 ESM
Packages
- exim4 - Exim is a mail transport agent
Details
It was discovered that Exim incorrectly handled certain regular
expressions. An attacker could use this issue to cause Exim to crash,
resulting in a denial of service, or possibly execute arbitrary code.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 22.10 | noarch | exim4-base | < 4.96-3ubuntu1.1 | UNKNOWN |
| Ubuntu | 22.10 | noarch | exim4 | < 4.96-3ubuntu1.1 | UNKNOWN |
| Ubuntu | 22.10 | noarch | exim4-base-dbgsym | < 4.96-3ubuntu1.1 | UNKNOWN |
| Ubuntu | 22.10 | noarch | exim4-config | < 4.96-3ubuntu1.1 | UNKNOWN |
| Ubuntu | 22.10 | noarch | exim4-daemon-heavy | < 4.96-3ubuntu1.1 | UNKNOWN |
| Ubuntu | 22.10 | noarch | exim4-daemon-heavy-dbgsym | < 4.96-3ubuntu1.1 | UNKNOWN |
| Ubuntu | 22.10 | noarch | exim4-daemon-light | < 4.96-3ubuntu1.1 | UNKNOWN |
| Ubuntu | 22.10 | noarch | exim4-daemon-light-dbgsym | < 4.96-3ubuntu1.1 | UNKNOWN |
| Ubuntu | 22.10 | noarch | exim4-dev | < 4.96-3ubuntu1.1 | UNKNOWN |
| Ubuntu | 22.10 | noarch | eximon4 | < 4.96-3ubuntu1.1 | UNKNOWN |
References
Related
fedora
fedora
[SECURITY] Fedora 35 Update: exim-4.96-4.fc35
2022-10-28 11:45:46
[SECURITY] Fedora 36 Update: exim-4.96-4.fc36
2022-10-28 11:16:14
[SECURITY] Fedora 37 Update: exim-4.96-5.fc37
2022-11-10 22:57:16
suse
suse
Security update for exim (important)
2022-10-30 00:00:00
Security update for exim (important)
2022-11-09 00:00:00
osv
osv
exim4 vulnerability
2022-11-24 14:02:15
exim-4.96-3.1 on GA media
2024-06-15 00:00:00
CGA-w822-fwh6-v73g
2024-06-06 12:29:42
ubuntucve
ubuntucve
CVE-2022-3559
2022-10-17 00:00:00
cloudlinux
cloudlinux
exim: Fix of CVE-2022-3559
2023-11-13 20:42:23
prion
prion
Design/Logic Flaw
2022-10-17 18:15:00
nessus
nessus
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Exim vulnerability (USN-5741-1)
2022-11-25 00:00:00
Amazon Linux AMI : exim (ALAS-2023-1662)
2023-01-24 00:00:00
openSUSE 15 Security Update : exim (openSUSE-SU-2022:10168-1)
2022-11-01 00:00:00
veracode
veracode
Denial Of Service (DoS)
2022-11-16 23:58:58
cve
cve
CVE-2022-3559
2022-10-17 18:15:12
cvelist
cvelist
CVE-2022-3559 Exim Regex use after free
2022-10-17 00:00:00
amazon
amazon
Important: exim
2023-01-18 20:56:00
nvd
nvd
CVE-2022-3559
2022-10-17 18:15:12
openvas
openvas
Ubuntu: Security Advisory (USN-5741-1)
2022-11-25 00:00:00
Exim 4.87 - 4.96 Use After Free Vulnerability
2022-10-19 00:00:00
Fedora: Security Advisory for exim (FEDORA-2022-90e08c08e6)
2022-11-11 00:00:00
debiancve
debiancve
CVE-2022-3559
2022-10-17 18:15:12
redos
redos
ROS-20221028-01
2022-10-28 00:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
8.3
Confidence
High
EPSS
0.007
Percentile
80.2%
Related for USN-5741-1