233 matches found
DLA-3082-1 exim4 - security update
Bulletin has no description...
Ubuntu: Security Advisory (USN-56-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-4934-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-288-3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-5574-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Arbitrary Code Execution
exim4 is vulnerable to arbitrary code execution. An integer overflow allows an attacker to execute arbitrary code on the host OS by leveraging on the mishandling of continuation lines during header-length restriction...
Arbitrary Code Execution
exim4 is vulnerable to arbitrary code execution. A heap out-of-bounds write in parsefixphrase allows an attacker to execute arbitrary code on the host OS...
Debian: Security Advisory (DLA-2650-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 2650-1] exim4 security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2650-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz May 05, 2021 https://wiki.debian.org/LTS -...
Debian DSA-4912-1 : exim4 - security update
The Qualys Research Labs reported several vulnerabilities in Exim, a mail transport agent, which could result in local privilege escalation and remote code execution. Details can be found in the Qualys advisory at https://www.qualys.com/2021/05/04/21nails/21nails.txt %NASLMINLEVEL 70300 C Tenable...
Ubuntu: Security Advisory (USN-4934-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DSA-4912-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DLA-2650-1 exim4 - security update
Bulletin has no description...
Privilege Escalation
exim4 is vulnerable to privilege escalation. The vulnerability exists due to insufficient validation of user-supplied input when processing new line characters. A remote attacker can inject a new line character into the spool header file and modify the mail queue...
Heap Out-of-bounds Read
exim4:buster is vulnerable to an heap out-of-bounds read in pdkimfinishbodyhash...
Arbitrary Code Execution
exim4 is vulnerable to arbitrary code execution. A heap buffer underflow in smtpungetc allows an attacker to execute arbitrary code on the host OS...
Information Disclosure
exim4 is vulnerable to information disclosure. The vulnerability exists due to a boundary condition in smtpsetupmsg function. A remote attacker can send specially crafted message to the system, trigger out-of-bounds read error and read contents of memory on the system...
Out-of-bounds Read And Write
exim4:buster is vulnerable to Heap out-of-bounds read and write in extractoption...
Arbitrary Code Execution
exim4 is vulnerable to arbitrary code execution . Line truncation and injection in spoolreadheader could potentially allow an attacker to execute arbitrary code on the host OS...
Privilege Escalation
exim4 is vulnerable to privilege escalation. The vulnerability exists due to a boundary error within the main function. A local user can trigger an out-of-bounds write and execute arbitrary code on the target system with elevated privileges...