CVE-2024-39929: Medium severity Exim Exim vulnerability
Exim through 4.97.1 misparses a multiline RFC 2231 header filename, and thus remote attackers can bypass a $mimefilename extension-blocking protection mechanism, and potentially deliver executable attachments to the mailboxes of end users.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/exim4to a version that resolves this vulnerability.Fixed in 4.90.1-1ubuntu1.10+ - Upgrade
Upgrade
ubuntu/exim4to a version that resolves this vulnerability.Fixed in 4.93-13ubuntu1.12 - Upgrade
Upgrade
ubuntu/exim4to a version that resolves this vulnerability.Fixed in 4.95-4ubuntu2.6 - Upgrade
Upgrade
ubuntu/exim4to a version that resolves this vulnerability.Fixed in 4.97-4ubuntu4.1 - Upgrade
Upgrade
ubuntu/exim4to a version that resolves this vulnerability.Fixed in 4.86.2-2ubuntu2.6+ - Upgrade
Upgrade
debian/exim4to a version that resolves this vulnerability.Fixed in 4.94.2-7+deb11u3Fixed in 4.96-15+deb12u5Fixed in 4.98-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-39929?
CVE-2024-39929 has a medium severity as it allows remote attackers to bypass filename extension-blocking protections.
How do I fix CVE-2024-39929?
To fix CVE-2024-39929, upgrade Exim to version 4.97.2 or later.
What versions of Exim are affected by CVE-2024-39929?
CVE-2024-39929 affects Exim versions up to and including 4.97.1.
Can CVE-2024-39929 result in malicious email attachments?
Yes, CVE-2024-39929 can allow attackers to deliver executable attachments to users' mailboxes.
Is the vulnerability CVE-2024-39929 specific to any operating system?
CVE-2024-39929 is particularly relevant for users of Ubuntu and Debian systems running affected versions of Exim.