Lucene search

K
redosRedosROS-20221028-01
HistoryOct 28, 2022 - 12:00 a.m.

ROS-20221028-01

2022-10-2800:00:00
redos.red-soft.ru
23
exim
mail server
vulnerability
dmarc_dns_lookup
regex handler
remote attacker
sensitive data
unix

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.007

Percentile

80.2%

Exim mail server vulnerability is related to the dmarc_dns_lookup function of the dmarc.c file of the DMARC handler
component. Exploitation of the vulnerability could allow an attacker acting remotely to cause a
memory freeing and gain access to sensitive data

Exim mail server vulnerability is related to a bug in the Regex Handler component handler. Exploitation
the vulnerability could allow a remote attacker to send a special request to the application
and gain access to sensitive data

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64exim< 4.96-4UNKNOWN

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.007

Percentile

80.2%