Summary
It was discovered that Exim incorrectly handled certain inputs.
An remote attacker could possibly use this issue to access sensitive
information or authentication bypass.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | exim4 | 4.86.2-2ubuntu2.6 |
| Ubuntu · 18.04 LTS 18.04:LTS | exim4 | 4.90.1-1ubuntu1.5 |
| Ubuntu · 20.04 LTS 20.04:LTS | exim4 | 4.93-13ubuntu1.1 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | exim4 | 4.82-3ubuntu2.4+esm2 |
Vulnerabilities 1
-
Unscored —
Exim through 4.93 has an out-of-bounds read in the SPA authenticator that could result in SPA/NTLM authentication bypas…
References
-
report
https://ubuntu.com/security/CVE-2020-12783