Summary
It was discovered that Exim SpamAssassin does not properly handle
configuration strings. An attacker could possibly use this issue to execute
arbitrary code. (CVE-2019-19920)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | sa-exim | 4.2.1-14+deb8u1build0.16.04.1 |
Vulnerabilities 1
-
Unscored —
sa-exim 4.2.1 allows attackers to execute arbitrary code if they can write a .cf file or a rule. This occurs because Gr…
References
-
report
https://ubuntu.com/security/CVE-2019-19920