CVE-2017-16944
First published: Sat Nov 25 2017(Updated: )
The receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89 allows remote attackers to cause a denial of service (infinite loop and stack exhaustion) via vectors involving BDAT commands and an improper check for a '.' character signifying the end of the content, related to the bdat_getc function.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Exim Exim | =4.88 | |
| Exim Exim | =4.89 | |
| Debian Debian Linux | =9.0 | |
| debian/exim4 | 4.92-8+deb10u6 4.92-8+deb10u8 4.94.2-7 4.94.2-7+deb11u1 4.96-15+deb12u1 4.96-15+deb12u2 4.97~RC2-2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugs.exim.org/show_bug.cgi?id=2201
- https://lists.exim.org/lurker/message/20171125.034842.d1d75cac.en.html
- https://security-tracker.debian.org/tracker/CVE-2017-16944
- https://security-tracker.debian.org/tracker/CVE-2017-16943
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=882671
- http://openwall.com/lists/oss-security/2017/11/25/1
- http://openwall.com/lists/oss-security/2017/11/25/2
- http://openwall.com/lists/oss-security/2017/11/25/3
- http://www.openwall.com/lists/oss-security/2021/05/04/7
- http://www.securitytracker.com/id/1039873
- https://www.debian.org/security/2017/dsa-4053
- https://www.exploit-db.com/exploits/43184/
- https://git.exim.org/exim.git/commitdiff/178ecb70987f024f0e775d87c2f8b2cf587dd542
Frequently Asked Questions
What is CVE-2017-16944?
CVE-2017-16944 is a vulnerability in the SMTP daemon in Exim 4.88 and 4.89 that allows remote attackers to cause a denial of service via vectors involving BDAT commands and an improper check for a '.' character signifying the end of the content.
What is the severity of CVE-2017-16944?
CVE-2017-16944 has a severity of 7.5 (high).
Which versions of Exim are affected by CVE-2017-16944?
Exim versions 4.88 and 4.89 are affected by CVE-2017-16944.
How can CVE-2017-16944 be exploited?
CVE-2017-16944 can be exploited by remote attackers using vectors involving BDAT commands and an improper check for a '.' character.
Where can I find more information about CVE-2017-16944?
More information about CVE-2017-16944 can be found at the following references: [Link 1](https://bugs.exim.org/show_bug.cgi?id=2201), [Link 2](https://lists.exim.org/lurker/message/20171125.034842.d1d75cac.en.html), [Link 3](https://security-tracker.debian.org/tracker/CVE-2017-16944).
- collector/debian-bugs
- alias/CVE-2017-16944
- collector/nvd-index
- collector/security-tracker-debian
- vendor/exim
- canonical/exim exim
- version/exim exim/4.88
- version/exim exim/4.89
- vendor/debian
- canonical/debian debian linux
- version/debian debian linux/9.0
- package-manager/debian