Summary
It was discovered that SA-Exim unsafely evaluated the parameters of its
greylisting SpamAssassin rule. An attacker able to write SpamAssassin
configuration files or rules could possibly use this issue to execute
arbitrary code.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | sa-exim | 4.2.1-16ubuntu0.1~esm1 |
Vulnerabilities 1
-
Unscored —
sa-exim 4.2.1 allows attackers to execute arbitrary code if they can write a .cf file or a rule. This occurs because Gr…
References
-
report
https://ubuntu.com/security/CVE-2019-19920