Skip to content
OpenAdvisories
Critical WID-SEC-2023-2505 6 CVEs

Exim: Mehrere Schwachstellen

Published Sep 27, 2023 · Updated Jun 10, 2026 · Revision 8 · de-DE

Vendor: amazon Vendor: Debian Vendor: Fedora Vendor: gentoo Vendor: Ubuntu Product: Linux Product: Linux Product: Linux Product: Linux Product: Linux 2 Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen in Exim ausnutzen, um beliebigen Programmcode auszuführen oder Informationen offenzulegen.

Product

Exim (EXperimental Internet Mailer) ist ein Mailserver und Mail Transfer Agent.

Vulnerabilities 6

  • Critical 9.8
    CVE-2023-42115 Public exploit EPSS 12%

    Exim AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability

    Exim AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Exim. Authentication is not required to exploit this vulnerability. The specific flaw exists w…

    Exim Exim exim4 exim4 Debian Ubuntu Alpine Wolfi
  • High 8.1
    CVE-2023-42116

    Exim SMTP Challenge Stack-based Buffer Overflow Remote Code Execution Vulnerability

    Exim SMTP Challenge Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Exim. Authentication is not required to exploit this vulnerability. The spec…

    Exim Exim exim4 exim4 Debian Ubuntu Alpine Wolfi
  • High 8.1
    CVE-2023-42117

    Exim Improper Neutralization of Special Elements Remote Code Execution Vulnerability

    Exim Improper Neutralization of Special Elements Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Exim. Authentication is not required to exploit this vulnerability. The spe…

    Exim Exim exim4 exim4 Debian Ubuntu Alpine Wolfi
  • High 7.5
    CVE-2023-42118

    Exim libspf2 Integer Underflow Remote Code Execution Vulnerability

    Exim libspf2 Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Exim libspf2. Authentication is not required to exploit this vulnerability. The spe…

    Exim libspf2 exim4 exim Debian Ubuntu Alpine Wolfi
  • Low 3.7
    CVE-2023-42114 EPSS 27%

    Exim NTLM Challenge Out-Of-Bounds Read Information Disclosure Vulnerability

    Exim NTLM Challenge Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Exim. Authentication is not required to exploit this vulnerability. The spec…

    Exim Exim exim4 exim4 Debian Ubuntu Alpine Wolfi
  • Low 3.1
    CVE-2023-42119

    Exim dnsdb Out-Of-Bounds Read Information Disclosure Vulnerability

    Exim dnsdb Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Exim. Authentication is not required to exploit this vulnerability. The spe…

    Exim Exim exim4 exim4 Debian Ubuntu Alpine

Revision history

  1. #8

    Neue Updates von Ubuntu aufgenommen

  2. #7

    Neue Updates von Debian aufgenommen

  3. #6

    Neue Updates von Gentoo aufgenommen

  4. #5

    Neue Updates von Ubuntu aufgenommen

  5. #4

    Neue Updates von Amazon aufgenommen

  6. #3

    Neue Updates von Ubuntu aufgenommen

  7. #2

    Neue Updates von Fedora und Debian aufgenommen

  8. #1

    Initiale Fassung

References