Exim tls-openssl.c Privilege Escalation Use-After-Free

The vulnerability of the tls-openssl.c component of the Exim message transfer agent allows for privilege escalation within the system by exploiting memory reclamation after it is released. This enables attackers to execute arbitrary code by sending a specially crafted request...

Exim Buffer Overflow Info Disclosure

The vulnerability of the smtpsetupmsg function in the Exim message forwarding agent is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to gain access to confidential information by sending a specially crafted message to t...

Exim spool_read_header() Security Bypass

The vulnerability of the spoolreadheader function in the Exim mail agent is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to circumvent security restrictions remotely...

Exim smtp_ungetc() Integer Overflow Code Execution

The vulnerability of the smtpungetc function in the Exim message delivery agent is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code by sending a specially crafted request to the server...

Exim Privilege Escalation

The vulnerability of the Exim message transfer agent is related to privilege management errors. Exploiting this vulnerability can allow an attacker to elevate privileges within the system by sending the file’s PID...

Exim DoS

The vulnerability of the Exim message transfer agent is related to resource management errors. Exploiting this vulnerability allows a malicious actor to perform a Denial-of-Service attack by sending specially crafted data to the application...

Exim parse_fix_frase() Buffer Overflow Privilege Escalation

The vulnerability of the parsefixphrase function in the Exim message forwarding agent is caused by an overflow in the buffer in the “queue”. Exploiting this vulnerability can allow an attacker to increase their privileges within the system and execute arbitrary code...

Exim Insufficient Validation

The vulnerability of the Exim message transfer agent is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to circumvent security restrictions set by the user...

Exim receive_msg() Integer Overflow Code Execution

The vulnerability of the receivemsg function in the Exim message forwarding agent is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

Exim Privilege Management File Deletion

The vulnerability of the Exim message transfer agent is related to privilege management errors. Exploiting this vulnerability could allow an attacker to delete arbitrary files from the system...

Exim extractoption Heap Buffer Overflow RCE

The vulnerability of the extractoption function in the Exim message forwarding agent is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code by sending a specially crafted message to the mail server...

Exim parse_fix_phrase() Heap Buffer Overflow Privilege Escalation

The vulnerability of the parsefixfrase function in the Exim message forwarding agent is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an intruder with privileges in the system to execute arbitrary code...

Security update for exim (critical)

openSUSE Security Update: Security update for exim Announcement ID: openSUSE-SU-2021:0753-1 Rating: critical References: 1079832 1136587 1142207 1154183 1160726 1171490 1171877 1173693 1185631 Cross-References: CVE-2017-1000369 CVE-2017-16943 CVE-2017-16944 CVE-2018-6789 CVE-2019-10149...

Security update for exim (critical)

openSUSE Security Update: Security update for exim Announcement ID: openSUSE-SU-2021:0754-1 Rating: critical References: 1079832 1171490 1171877 1173693 1185631 Cross-References: CVE-2017-1000369 CVE-2017-16943 CVE-2017-16944 CVE-2018-6789 CVE-2019-16928 CVE-2020-12783 CVE-2020-28007 CVE-2020-280...

OPENSUSE-SU-2021:0754-1 Security update for exim

This update for exim fixes the following issues: Exim was updated to exim-4.94.2 security update boo1185631 CVE-2020-28007: Link attack in Exim's log directory CVE-2020-28008: Assorted attacks in Exim's spool directory CVE-2020-28014: Arbitrary PID file creation CVE-2020-28011: Heap buffer overfl...

OPENSUSE-SU-2021:0753-1 Security update for exim

This update for exim fixes the following issues: exim was updated to 4.94.2: security update boo1185631 CVE-2020-28007: Link attack in Exim's log directory CVE-2020-28008: Assorted attacks in Exim's spool directory CVE-2020-28014: Arbitrary PID file creation CVE-2020-28011: Heap buffer overflow i...

openSUSE Security Update : exim (openSUSE-2021-677) (Stack Clash)

This update for exim fixes the following issues : Exim was updated to exim-4.94.2 security update boo1185631 - CVE-2020-28007: Link attack in Exim's log directory - CVE-2020-28008: Assorted attacks in Exim's spool directory - CVE-2020-28014: Arbitrary PID file creation - CVE-2020-28011: Heap buff...

Exim 4 远程代码执行漏洞（CVE-2020-28018）

CVE-2020-28018: Exim Use-after-free UAF leading to RCE Introduction There exists a Use-after-free UAF vulnerability in tls-openssl.c that allow remote unauthenticated attackers to corrupt internal memory data, thus finally achieving remote code execution. Primitives: - x Memory Leakage - x...

Exploit for Use After Free in Exim

CVE-2020-28018: Exim Use-after-free UAF leading to RCE I...

Exim Security Feature Issue Vulnerability

Exim is an open source messaging agent MTA running on Unix systems that routes, forwards and delivers mail. Exim suffers from a security signature issue vulnerability that stems from the lack of a closed execution flag for privileged pipelines. No detailed vulnerability details are provided at th...