239 matches found
Heap Out-of-bounds Read
exim4:buster is vulnerable to an heap out-of-bounds read in pdkimfinishbodyhash...
Arbitrary Code Execution
exim4 is vulnerable to arbitrary code execution. A heap buffer underflow in smtpungetc allows an attacker to execute arbitrary code on the host OS...
Information Disclosure
exim4 is vulnerable to information disclosure. The vulnerability exists due to a boundary condition in smtpsetupmsg function. A remote attacker can send specially crafted message to the system, trigger out-of-bounds read error and read contents of memory on the system...
Out-of-bounds Read And Write
exim4:buster is vulnerable to Heap out-of-bounds read and write in extractoption...
Arbitrary Code Execution
exim4 is vulnerable to arbitrary code execution . Line truncation and injection in spoolreadheader could potentially allow an attacker to execute arbitrary code on the host OS...
Privilege Escalation
exim4 is vulnerable to privilege escalation. The vulnerability exists due to a boundary error within the main function. A local user can trigger an out-of-bounds write and execute arbitrary code on the target system with elevated privileges...
Arbitrary File Creation And Clobbering
exim4:buster is vulnerable to an arbitrary file creation and clobbering...
Arbitrary Code Execution
exim4 is vulnerable to arbitrary code execution. If a local attacker executes Exim with affected functions such as -F '.', a buffer overflow would occur in parsefixphrase when it calls strncpy with a -1 size, potentially allowing for arbitrary code execution on the host OS...
Privilege Escalation
exim4 is vulnerable to privilege escalation. The vulnerability exists when allowfilter is true, using a missing close-on-exec flag for a privileged pipe...
Heap Buffer Overflow
exim4:buster is vulnerable to heap buffer overflow in queuerun...
Arbitrary Code Execution
exim4 is vulnerable to arbitrary code execution. An integer overflow in receiveaddrecipient could potentially allow an attacker to execute arbitrary code on the host OS...
Privilege Escalation
exim4 is vulnerable to privilege escalation. The vulnerability exists due to a new-line injection into spool header files...
Denial Of Service (DoS)
exim4:buster is vulnerable to denial of service. The vulnerability exists because of failure to reset function pointer after BDAT error...
Privilege Escalation
exim4 is vulnerable to privilege escalation. An attacker with the privileges of the exim user can create a symlink/hardlink in the log directory and append arbitrary contents to an arbitrary file such as /etc/passwd to obtain full root privileges...
Privilege Escalation
exim4 is vulnerable to privilege escalation. The vulnerability exists due to an integer overflow in getstdinput...
Denial Of Service (DoS)
exim4:buster is vulnerable to denial of service and other assorted attacks in Exim's spool directory...
USN-4934-1 exim4 vulnerabilities
It was discovered that Exim contained multiple security issues. An attacker could use these issues to cause a denial of service, execute arbitrary code remotely, obtain sensitive information, or escalate local privileges...
[SECURITY] [DSA 4912-1] exim4 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4912-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 04, 2021 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4912-1] exim4 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4912-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 04, 2021 https://www.debian.org/security/faq -...