CVE-2016-9963: Medium severity Exim Exim vulnerability
Published Feb 1, 2017
·Updated
Exim before 4.87.1 might allow remote attackers to obtain the private DKIM signing key via vectors related to log files and bounce messages.
Affected Software
6 affected components
Exim Exim<=4.87
Canonical Ubuntu Linux=12.04
Canonical Ubuntu Linux=14.04
Canonical Ubuntu Linux=16.04
Canonical Ubuntu Linux=16.10
Debian Debian Linux=8.0
Event History
Feb 1, 2017
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Data Sourced
via NVD·03:59 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-9963?
CVE-2016-9963 has a medium severity rating due to the potential exposure of sensitive cryptographic material.
2
How do I fix CVE-2016-9963?
To fix CVE-2016-9963, upgrade Exim to version 4.87.1 or later.
3
What types of systems are affected by CVE-2016-9963?
CVE-2016-9963 affects Exim versions prior to 4.87.1 and various Ubuntu and Debian Linux versions.
4
Can CVE-2016-9963 lead to remote attacks?
Yes, CVE-2016-9963 allows remote attackers to potentially obtain the private DKIM signing key.
5
Is CVE-2016-9963 related to email security?
Yes, CVE-2016-9963 is related to email security as it involves the exposure of DKIM signing keys used in email validation.