Skip to content
OpenAdvisories
Unscored USN-3164-1 1 CVE

exim4 vulnerability

Published Jan 5, 2017 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

Bjoern Jacke discovered that Exim incorrectly handled DKIM keys. In certain
configurations, private DKIM signing keys could be leaked to the log files.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS exim4 4.82-3ubuntu2.2
Ubuntu · 16.04 LTS 16.04:LTS exim4 4.86.2-2ubuntu2.1

Vulnerabilities 1

  • Unscored —
    CVE-2016-9963

    Exim before 4.87.1 might allow remote attackers to obtain the private DKIM signing key via vectors related to log files…

    exim4 exim4 Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2016-9963