Summary
It was discovered that Exim incorrectly handled certain requests.
A remote attacker could possibly use a published exploitation technique
to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass
of an SPF protection mechanism.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | exim4 | 4.93-13ubuntu1.10 |
| Ubuntu · 22.04 LTS 22.04:LTS | exim4 | 4.95-4ubuntu2.5 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | exim4 | 4.86.2-2ubuntu2.6+esm6 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | exim4 | 4.90.1-1ubuntu1.10+esm3 |
Vulnerabilities 1
-
Unscored —
Exim before 4.97.1 allows SMTP smuggling in certain PIPELINING/CHUNKING configurations. Remote attackers can use a publ…
References
-
report
https://ubuntu.com/security/CVE-2023-51766