Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-6411-1
HistoryOct 04, 2023 - 12:00 a.m.

Exim vulnerabilities

2023-10-0400:00:00
ubuntu.com
21
exim
ubuntu
vulnerabilities
cve-2023-42114
cve-2023-42115
cve-2023-42116
mail transport agent
out-of-bounds
code execution

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.6%

JSON

Releases

  • Ubuntu 23.04
  • Ubuntu 22.04 LTS
  • Ubuntu 20.04 LTS
  • Ubuntu 18.04 ESM
  • Ubuntu 16.04 ESM
  • Ubuntu 14.04 ESM

Packages

  • exim4 - Exim is a mail transport agent

Details

It was discovered that Exim incorrectly handled certain challenge requests.
A remote attacker could possibly use this issue to perform out-of-bounds
reads, resulting in information leakage. (CVE-2023-42114)

It was discovered that Exim incorrectly handled validation of user-supplied
data. A remote attacker could possibly use this issue to perform
out-of-bounds writes, resulting in arbitrary code execution. This issue
only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 23.04.
(CVE-2023-42115)

It was discovered that Exim incorrectly handled certain challenge requests.
A remote attacker could possibly use this issue to perform out-of-bounds
writes, resulting in arbitrary code execution. (CVE-2023-42116)

OSVersionArchitecturePackageVersionFilename
Ubuntu23.04noarchexim4< 4.96-14ubuntu1.2UNKNOWN
Ubuntu23.04noarchexim4-base< 4.96-14ubuntu1.2UNKNOWN
Ubuntu23.04noarchexim4-base-dbgsym< 4.96-14ubuntu1.2UNKNOWN
Ubuntu23.04noarchexim4-config< 4.96-14ubuntu1.2UNKNOWN
Ubuntu23.04noarchexim4-daemon-heavy< 4.96-14ubuntu1.2UNKNOWN
Ubuntu23.04noarchexim4-daemon-heavy-dbgsym< 4.96-14ubuntu1.2UNKNOWN
Ubuntu23.04noarchexim4-daemon-light< 4.96-14ubuntu1.2UNKNOWN
Ubuntu23.04noarchexim4-daemon-light-dbgsym< 4.96-14ubuntu1.2UNKNOWN
Ubuntu23.04noarchexim4-dev< 4.96-14ubuntu1.2UNKNOWN
Ubuntu23.04noarcheximon4< 4.96-14ubuntu1.2UNKNOWN
Rows per page:
1-10 of 851

Related

openvas 9
debian 2
osv 3
nessus 12
fedora 3
cloudlinux 1
redos 1
gentoo 1
thn 1
malwarebytes 1
nvd 3
redhatcve 3
veracode 3
zdi 3
ubuntucve 3
cve 3
cgr 3
cvelist 3
wolfi 3
hivepro 1
vulnrichment 2
alpinelinux 3
wizblog 1
githubexploit 1
debiancve 3
amazon 1
openvas
openvas
Debian: Security Advisory (DSA-5512-1)
2023-10-03 00:00:00
Exim < 4.96.1 Multiple Vulnerabilities (Sep 2023)
2023-09-29 00:00:00
Ubuntu: Security Advisory (USN-6411-1)
2023-10-05 00:00:00
debian
debian
[SECURITY] [DSA 5512-1] exim4 security update
2023-10-02 14:31:15
[SECURITY] [DLA 3599-1] exim4 security update
2023-10-02 16:20:12
osv
osv
exim4 - security update
2023-10-02 00:00:00
exim4 vulnerabilities
2023-10-04 13:41:19
exim4 - security update
2023-10-02 00:00:00
nessus
nessus
Exim < 4.96.1 Multiple Vulnerabilities
2023-10-20 00:00:00
Debian DSA-5512-1 : exim4 - security update
2023-10-02 00:00:00
Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 : Exim vulnerabilities (USN-6411-1)
2023-10-04 00:00:00
fedora
fedora
[SECURITY] Fedora 39 Update: exim-4.96.2-1.fc39
2023-11-03 18:58:44
[SECURITY] Fedora 38 Update: exim-4.96.1-1.fc38
2023-10-09 01:56:05
[SECURITY] Fedora 37 Update: exim-4.96.1-1.fc37
2023-10-09 01:27:27
cloudlinux
cloudlinux
exim: Fix of 2 CVEs
2023-10-16 18:59:03
redos
redos
ROS-20240404-17
2024-04-04 00:00:00
gentoo
gentoo
Exim: Multiple Vulnerabilities
2024-02-18 00:00:00
thn
thn
New Critical Security Flaws Expose Exim Mail Servers to Remote Attacks
2023-09-30 04:14:00
malwarebytes
malwarebytes
Exim finally fixes 3 out of 6 vulnerabilities
2023-10-05 01:00:00
nvd
nvd
CVE-2023-42114
2024-05-03 03:15:49
CVE-2023-42116
2024-05-03 03:15:50
CVE-2023-42115
2024-05-03 03:15:50
redhatcve
redhatcve
CVE-2023-42114
2023-09-30 18:24:17
CVE-2023-42116
2023-09-30 17:54:21
CVE-2023-42115
2023-09-30 17:54:22
veracode
veracode
Information Disclosure
2023-10-02 17:47:18
Remote Code Execution (RCE)
2023-10-02 17:47:19
Stack-based Overflow
2023-10-02 17:47:19
zdi
zdi
(0Day) Exim SMTP Challenge Stack-based Buffer Overflow Remote Code Execution Vulnerability
2023-09-27 00:00:00
(0Day) Exim AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability
2023-09-27 00:00:00
(0Day) Exim NTLM Challenge Out-Of-Bounds Read Information Disclosure Vulnerability
2023-09-27 00:00:00
ubuntucve
ubuntucve
CVE-2023-42116
2023-09-28 00:00:00
CVE-2023-42115
2023-09-28 00:00:00
CVE-2023-42114
2023-09-28 00:00:00
cve
cve
CVE-2023-42116
2024-05-03 03:15:50
CVE-2023-42115
2024-05-03 03:15:50
CVE-2023-42114
2024-05-03 03:15:49
cgr
cgr
CVE-2023-42116 vulnerabilities
2024-05-19 03:07:16
CVE-2023-42115 vulnerabilities
2024-05-19 03:07:16
CVE-2023-42114 vulnerabilities
2024-05-19 03:07:16
cvelist
cvelist
CVE-2023-42115 Exim AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability
2024-05-03 02:13:23
CVE-2023-42116 Exim SMTP Challenge Stack-based Buffer Overflow Remote Code Execution Vulnerability
2024-05-03 02:13:24
CVE-2023-42114 Exim NTLM Challenge Out-Of-Bounds Read Information Disclosure Vulnerability
2024-05-03 02:13:22
wolfi
wolfi
CVE-2023-42115 vulnerabilities
2024-06-26 03:08:30
CVE-2023-42116 vulnerabilities
2024-06-26 03:08:30
CVE-2023-42114 vulnerabilities
2024-06-26 03:08:30
hivepro
hivepro
Exim Vulnerable to Zero-Day Remote Code Execution Attacks
2023-10-04 08:27:21
vulnrichment
vulnrichment
CVE-2023-42115 Exim AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability
2024-05-03 02:13:23
CVE-2023-42114 Exim NTLM Challenge Out-Of-Bounds Read Information Disclosure Vulnerability
2024-05-03 02:13:22
alpinelinux
alpinelinux
CVE-2023-42116
2024-05-03 03:15:50
CVE-2023-42115
2024-05-03 03:15:50
CVE-2023-42114
2024-05-03 03:15:49
wizblog
wizblog
Critical and high severity Exim vulnerabilities: everything you need to know
2023-10-02 13:53:02
githubexploit
githubexploit
Exploit for CVE-2023-42115
2024-02-18 10:07:49
debiancve
debiancve
CVE-2023-42116
2024-05-03 03:15:50
CVE-2023-42115
2024-05-03 03:15:50
CVE-2023-42114
2024-05-03 03:15:49
amazon
amazon
Important: exim
2023-10-12 15:48:00

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.6%

JSON
Related for USN-6411-1
openvas9debian2osv3nessus12fedora3cloudlinux1redos1gentoo1thn1malwarebytes1nvd3redhatcve3veracode3zdi3ubuntucve3cve3cgr3cvelist3wolfi3hivepro1vulnrichment2alpinelinux3wizblog1githubexploit1debiancve3amazon1