Lucene search
UbuntuUSN-6939-1HistoryJul 31, 2024 - 12:00 a.m.
Exim vulnerability
2024-07-3100:00:00
ubuntu.com
5
exim mail transport agent
remote attacker
executable attachments
mime header
ubuntu 24.04 lts
ubuntu 22.04 lts
ubuntu 20.04 lts
ubuntu 18.04 esm
ubuntu 16.04 esm
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
AI Score
7.1
Confidence
Low
Releases
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 ESM
- Ubuntu 16.04 ESM
Packages
- exim4 - Exim is a mail transport agent
Details
Phillip Szelat discovered that Exim misparses multiline MIME header
filenames. A remote attacker could use this issue to bypass a MIME filename
extension-blocking protection mechanism and possibly deliver executable
attachments to the mailboxes of end users.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 24.04 | noarch | exim4 | < 4.97-4ubuntu4.1 | UNKNOWN |
| Ubuntu | 24.04 | noarch | exim4-base | < 4.97-4ubuntu4.1 | UNKNOWN |
| Ubuntu | 24.04 | noarch | exim4-base-dbgsym | < 4.97-4ubuntu4.1 | UNKNOWN |
| Ubuntu | 24.04 | noarch | exim4-config | < 4.97-4ubuntu4.1 | UNKNOWN |
| Ubuntu | 24.04 | noarch | exim4-daemon-heavy | < 4.97-4ubuntu4.1 | UNKNOWN |
| Ubuntu | 24.04 | noarch | exim4-daemon-heavy-dbgsym | < 4.97-4ubuntu4.1 | UNKNOWN |
| Ubuntu | 24.04 | noarch | exim4-daemon-light | < 4.97-4ubuntu4.1 | UNKNOWN |
| Ubuntu | 24.04 | noarch | exim4-daemon-light-dbgsym | < 4.97-4ubuntu4.1 | UNKNOWN |
| Ubuntu | 24.04 | noarch | exim4-dev | < 4.97-4ubuntu4.1 | UNKNOWN |
| Ubuntu | 24.04 | noarch | eximon4 | < 4.97-4ubuntu4.1 | UNKNOWN |
References
Related
openvas
openvas
Debian: Security Advisory (DSA-5728-1)
2024-07-11 00:00:00
Exim <= 4.97.1 Header Filename Parsing Vulnerability (Jun 2024)
2024-07-05 00:00:00
Ubuntu: Security Advisory (USN-6939-1)
2024-08-01 00:00:00
ubuntucve
ubuntucve
CVE-2024-39929
2024-07-04 00:00:00
thn
thn
redos
redos
ROS-20240712-01
2024-07-12 00:00:00
vulnrichment
vulnrichment
CVE-2024-39929
2024-07-04 00:00:00
nessus
nessus
Fedora 40 : exim (2024-55603127f3)
2024-07-25 00:00:00
Fedora 39 : exim (2024-87a7b3f47a)
2024-07-25 00:00:00
osv
osv
exim4 - security update
2024-07-10 00:00:00
exim4 vulnerability
2024-07-31 18:40:26
CVE-2024-39929
2024-07-04 15:15:10
nvd
nvd
CVE-2024-39929
2024-07-04 15:15:10
fedora
fedora
[SECURITY] Fedora 40 Update: exim-4.98-1.fc40
2024-07-25 01:29:37
[SECURITY] Fedora 39 Update: exim-4.98-1.fc39
2024-07-25 04:21:58
githubexploit
githubexploit
Exploit for CVE-2024-39929
2024-07-29 15:09:53
debiancve
debiancve
CVE-2024-39929
2024-07-04 15:15:10
cvelist
cvelist
CVE-2024-39929
2024-07-04 00:00:00
redhatcve
redhatcve
CVE-2024-39929
2024-07-04 15:50:18
alpinelinux
alpinelinux
CVE-2024-39929
2024-07-04 15:15:10
cve
cve
CVE-2024-39929
2024-07-04 15:15:10
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
AI Score
7.1
Confidence
Low
Related for USN-6939-1