Lucene search

K
redosRedosROS-20240712-01
HistoryJul 12, 2024 - 12:00 a.m.

ROS-20240712-01

2024-07-1200:00:00
redos.red-soft.ru
13
exim mail server
multiline rfc 2231
vulnerability
analysis
header file name
remote delivery
executable attachments

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

AI Score

6.8

Confidence

Low

Vulnerability in Multiline RFC 2231 component of Exim mail server is related to incorrect analysis of the
the multiline RFC 2231 header file name. Exploitation of the vulnerability could allow an attacker,
acting remotely, to deliver executable attachments to end-user mailboxes

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64exim< 4.98~rc3-1UNKNOWN

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

AI Score

6.8

Confidence

Low