Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:43451
HistoryOct 02, 2023 - 5:47 p.m.

Remote Code Execution (RCE)

2023-10-0217:47:20
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
libspf2
remote code execution
exim server
system control
data theft

7.5 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

28.8%

libspf2 is vulnerable to Remote Code Execution (RCE). The vulnerability could allow an attacker to execute arbitrary code on the Exim server, potentially allowing them to take control of the system or steal sensitive data.

7.5 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

28.8%