Remote Code Execution (RCE)

exim4 is vulnerable to Remote Code Execution RCE. A memory corruption vulnerability exists in the smtp service of Exim, which listens on TCP port 25 by default that allows an attacker to execute arbitrary code on a vulnerable system by sending a specially crafted SMTP message...

Exim < 4.96.1 Multiple Vulnerabilities

According to its banner, the version of Exim running on the remote host is prior to 4.96.1. It is, therefore, potentially affected by multiple vulnerabilities: - NTLM Challenge Out-Of-Bounds Read CVE-2023-42114 - AUTH Out-Of-Bounds Write CVE-2023-42115 - SMTP Challenge Stack-based Buffer Overflow...

Exim < 4.96.2 Multiple Vulnerabilities

According to its banner, the version of Exim running on the remote host is prior to 4.96.2. It is, therefore, potentially affected by multiple vulnerabilities: - Improper Neutralization of Special Elements CVE-2023-42117 - dnsdb Out-Of-Bounds Read CVE-2023-42119 Note that Nessus has not tested fo...

openSUSE 15 Security Update : exim (openSUSE-SU-2023:0304-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0304-1 advisory. - Improper Neutralization of Special Elements Remote Code Execution Vulnerability fedora-all CVE-2023-42117 - dnsdb Out-Of-Bounds Read Informatio...

openSUSE 15 Security Update : exim (openSUSE-SU-2023:0303-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0303-1 advisory. - Improper Neutralization of Special Elements Remote Code Execution Vulnerability fedora-all CVE-2023-42117 - dnsdb Out-Of-Bounds Read Informatio...

OPENSUSE-SU-2023:0304-1 Security update for exim

This update for exim fixes the following issues: - CVE-2023-42117: Fixes Improper Neutralization of Special Elements Remote Code Execution Vulnerability boo1215787 - CVE-2023-42119: Fixes dnsdb Out-Of-Bounds Read Information Disclosure Vulnerability boo1215789...

OPENSUSE-SU-2023:0303-1 Security update for exim

This update for exim fixes the following issues: - CVE-2023-42117: Fixes Improper Neutralization of Special Elements Remote Code Execution Vulnerability boo1215787 - CVE-2023-42119: Fixes dnsdb Out-Of-Bounds Read Information Disclosure Vulnerability boo1215789...

Security update for exim (critical)

openSUSE Security Update: Security update for exim Announcement ID: openSUSE-SU-2023:0304-1 Rating: critical References: 1215787 1215789 Cross-References: CVE-2023-42117 CVE-2023-42119 Affected Products: openSUSE Backports SLE-15-SP4 An update that fixes two vulnerabilities is now available...

Security update for exim (critical)

openSUSE Security Update: Security update for exim Announcement ID: openSUSE-SU-2023:0303-1 Rating: critical References: 1215787 1215789 Cross-References: CVE-2023-42117 CVE-2023-42119 Affected Products: openSUSE Backports SLE-15-SP5 An update that fixes two vulnerabilities is now available...

CLSA-2023-1697576371 Update of exim

Rebuilt with rebrand to TuxCare ELS...

CLSA-2023-1697576165 Update of exim

Rebuilt with rebrand to TuxCare ELS...

CLSA-2023-1697482739 exim: Fix of 2 CVEs

CVE-2023-42114: fix possible OOB read in SPA authenticator - CVE-2023-42116: fix possible OOB write in SPA authenticator...

exim: Fix of 2 CVEs

CVE-2023-42114: fix possible OOB read in SPA authenticator - CVE-2023-42116: fix possible OOB write in SPA authenticator...

CLSA-2023-1697481196 exim: Fix of 2 CVEs

CVE-2023-42114: fix possible OOB read in SPA authenticator - CVE-2023-42116: fix possible OOB write in SPA authenticator...

Fedora: Security Advisory for exim (FEDORA-2023-0a7690525f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for exim (FEDORA-2023-42313af0de)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 38 Update: exim-4.96.1-1.fc38

Exim is a message transfer agent MTA developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more general. There is a great deal ...

A week in security (October 2 - October 8)

Last week on Malwarebytes Labs: Multi-factor authentication has proven it works, so what are we waiting for? Amazon Prime email scammer snatches defeat from the jaws of victory 2023 MITRE ATT&CK® Evaluation results: Malwarebytes earns high marks for detection, blocks initial malware executions...

Fedora 38 : exim (2023-42313af0de)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-42313af0de advisory. This is exim update fixing several security problems. Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 37 : exim (2023-0a7690525f)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-0a7690525f advisory. This is an exim update fixing several security problems. Tenable has extracted the preceding description block directly from the Fedora security...