Summary
It was discovered that Exim did not properly deallocate memory when
processing certain command line arguments. A local attacker could use this
in conjunction with a vulnerability in the underlying kernel to possibly
execute arbitrary code and gain administrative privileges.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | exim4 | 4.82-3ubuntu2.3 |
| Ubuntu · 16.04 LTS 16.04:LTS | exim4 | 4.86.2-2ubuntu2.2 |
Vulnerabilities 1
-
Unscored —
Exim supports the use of multiple "-p" command line arguments which are malloc()'ed and never free()'ed, used in conjun…
References
-
report
https://ubuntu.com/security/CVE-2017-1000369