Lucene search

K
redosRedosROS-20240911-05
HistorySep 11, 2024 - 12:00 a.m.

ROS-20240911-05

2024-09-1100:00:00
redos.red-soft.ru
2
exim mail server
libspf2 library
vulnerability
integer overflow
spf macros
remote code execution

CVSS3

7.5

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

A vulnerability in the libspf2 library of the Exim mail server is related to an integer overflow resulting from the
of SPF macros. Exploitation of the vulnerability could allow an attacker acting remotely,
execute arbitrary code

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64libspf2< 1.2.11-1.20210922git4915c308UNKNOWN

CVSS3

7.5

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High