Security update for exim (important)

openSUSE Security Update: Security update for exim Announcement ID: openSUSE-SU-2024:0218-1 Rating: important References: 1227423 Cross-References: CVE-2024-39929 Affected Products: openSUSE Backports SLE-15-SP5 An update that fixes one vulnerability is now available. Description: This update for...

Fedora 40 : exim (2024-55603127f3)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-55603127f3 advisory. This is new version of exim fixing CVE-2024-39929. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note tha...

Fedora 39 : exim (2024-87a7b3f47a)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-87a7b3f47a advisory. This is new version of exim fixing CVE-2024-39929. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note tha...

OPENSUSE-SU-2024:14196-1 exim-4.98-1.1 on GA media

These are all security issues fixed in the exim-4.98-1.1 package on the GA media of openSUSE Tumbleweed...

The vulnerability of the Multiline RFC 2231 email server component in Exim, which allows bypassing existing security restrictions by implementing specially crafted executable files.

The vulnerability of the Multiline RFC 2231 email server component relates to deficiencies in the restrictions on loading files of hazardous types. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions by introducing specially crafted executable files...

ROS-20240712-01

Vulnerability in Multiline RFC 2231 component of Exim mail server is related to incorrect analysis of the the multiline RFC 2231 header file name. Exploitation of the vulnerability could allow an attacker, acting remotely, to deliver executable attachments to end-user mailboxes...

Exploit for Improper Encoding or Escaping of Output in Exim

CVE-2024-39929 PoC Vulnerability Brief Exim through 4.97...

Critical Exim Mail Server Vulnerability Exposes Millions to Malicious Attachments

A critical security issue has been disclosed in the Exim mail transfer agent that could enable threat actors to deliver malicious attachments to target users' inboxes. The vulnerability, tracked as CVE-2024-39929, has a CVSS score of 9.1 out of 10.0. It has been addressed in version 4.98. "Exim...

USN-6881-1 exim4 vulnerability

It was discovered that Exim did not enforce STARTTLS sync point on client side. An attacker could possibly use this issue to perform response injection during MTA SMTP sending...

USN-6881-1: Exim vulnerability

It was discovered that Exim did not enforce STARTTLS sync point on client side. An attacker could possibly use this issue to perform response injection during MTA SMTP sending...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS : Exim vulnerability (USN-6881-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6881-1 advisory. It was discovered that Exim did not enforce STARTTLS sync point on client side. An attacker could possibly use this issue to...

SUSE CVE-2024-39929

Exim through 4.97.1 misparses a multiline RFC 2231 header filename, and thus remote attackers can bypass a $mimefilename extension-blocking protection mechanism, and potentially deliver executable attachments to the mailboxes of end users...

Exim <= 4.97.1 Header Filename Parsing Vulnerability (Jun 2024)

Exim is prone to a header filename parsing vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:exim:exim"; if...

CVE-2024-39929

Exim through 4.97.1 misparses a multiline RFC 2231 header filename, and thus remote attackers can bypass a $mimefilename extension-blocking protection mechanism, and potentially deliver executable attachments to the mailboxes of end users...

CVE-2024-39929

Exim through 4.97.1 misparses a multiline RFC 2231 header filename, and thus remote attackers can bypass a $mimefilename extension-blocking protection mechanism, and potentially deliver executable attachments to the mailboxes of end users...

DEBIAN-CVE-2024-39929

Exim through 4.97.1 misparses a multiline RFC 2231 header filename, and thus remote attackers can bypass a $mimefilename extension-blocking protection mechanism, and potentially deliver executable attachments to the mailboxes of end users...

UBUNTU-CVE-2024-39929

Exim through 4.97.1 misparses a multiline RFC 2231 header filename, and thus remote attackers can bypass a $mimefilename extension-blocking protection mechanism, and potentially deliver executable attachments to the mailboxes of end users...

CVE-2024-39929

Exim through 4.97.1 misparses a multiline RFC 2231 header filename, and thus remote attackers can bypass a $mimefilename extension-blocking protection mechanism, and potentially deliver executable attachments to the mailboxes of end users...

CVE-2024-39929

CVE-2024-39929 affects Exim by misparsing multiline RFC 2231 header filenames, allowing a remote attacker to bypass a mime_filename extension-blocking check and potentially deliver executable attachments. Public references show patches exist: Fedora/NASL entries note fixes in exim 4.98 (and newer...

Exim Security Vulnerabilities

Exim is an open source messaging agent MTA running on Unix systems that routes, forwards and delivers mail. A security vulnerability exists in Exim 4.97.1 and earlier versions, which stems from incorrectly parsing multiple lines of RFC 2231 header filenames, so that a remote attacker can bypass t...