DSA-4536: -1 exim4 -- security update

Published Sep 28, 2019

Updated

A buffer overflow flaw was discovered in Exim, a mail transport agent. A remote attacker can take advantage of this flaw to cause a denial of service, or potentially the execution of arbitrary code.

Affected Software

2 affected components

debian/exim4

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade exim4 to a version that resolves this vulnerability.
Patch DSA-4536-1

Event History

Sep 28, 2019

Advisory Published

12:00 AM

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2019-16928

Frequently Asked Questions

Who is exposed to this issue?

Systems running Debian's exim4 mail transport agent are exposed. The flaw can be triggered remotely, so a reachable Exim service is the relevant attack surface.

What could an attacker do?

A remote attacker may be able to cause a denial of service. The advisory also identifies potential arbitrary code execution.

DSA-4536: -1 exim4 -- security update

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Who is exposed to this issue?

What could an attacker do?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What could an attacker do?