Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-42116
HistorySep 28, 2023 - 12:00 a.m.

CVE-2023-42116

2023-09-2800:00:00
ubuntu.com
ubuntu.com
13
exim
smtp
buffer overflow
rce
cve-2023-42116
vulnerability
remote code execution
ntlm challenge
stack-based buffer
exim installation
authentication
zdi
patch

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

8.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.8%

Exim SMTP Challenge Stack-based Buffer Overflow Remote Code Execution
Vulnerability. This vulnerability allows remote attackers to execute
arbitrary code on affected installations of Exim. Authentication is not
required to exploit this vulnerability. The specific flaw exists within the
handling of NTLM challenge requests. The issue results from the lack of
proper validation of the length of user-supplied data prior to copying it
to a fixed-length stack-based buffer. An attacker can leverage this
vulnerability to execute code in the context of the service account. Was
ZDI-CAN-17515.

Notes

Author Note
eslerm no security patches available, see ZDI’s timeline
allenpthuang patches now available, see the thread on Openwall
OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchexim4< 4.90.1-1ubuntu1.10+esm1UNKNOWN
ubuntu20.04noarchexim4< 4.93-13ubuntu1.8UNKNOWN
ubuntu22.04noarchexim4< 4.95-4ubuntu2.3UNKNOWN
ubuntu23.04noarchexim4< 4.96-14ubuntu1.2UNKNOWN
ubuntu23.10noarchexim4< 4.96-17ubuntu2UNKNOWN
ubuntu14.04noarchexim4< 4.82-3ubuntu2.4+esm6UNKNOWN
ubuntu16.04noarchexim4< 4.86.2-2ubuntu2.6+esm4UNKNOWN

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

8.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.8%