DSA-4110: -1 exim4 -- security update

Published Feb 10, 2018

Updated

exim4 - security update

Other sources

Meh Chang discovered a buffer overflow flaw in a utility function used in the SMTP listener of Exim, a mail transport agent. A remote attacker can take advantage of this flaw to cause a denial of service, or potentially the execution of arbitrary code via a specially crafted message.

Affected Software

2 affected components

debian/exim4

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade exim4 to a version that resolves this vulnerability.
Patch DSA-4110-1

Event History

Feb 10, 2018

Advisory Published

12:00 AM

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2018-6789

Frequently Asked Questions

Which systems are exposed to this issue?

Systems running the Exim SMTP listener are exposed, because the vulnerable utility function is used by that listener.

What does an attacker need to do to exploit it?

A remote attacker must send a specially crafted message to the affected Exim SMTP listener. Successful exploitation can cause a denial of service and may potentially allow arbitrary code execution.

DSA-4110: -1 exim4 -- security update

Other sources

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Which systems are exposed to this issue?

What does an attacker need to do to exploit it?

Company

Resources

Contact

Frequently Asked Questions

Which systems are exposed to this issue?

What does an attacker need to do to exploit it?