USN-4010-1: Exim vulnerability
It was discovered that Exim incorrectly handled certain decoding operations. A remote attacker could possibly use this issue to execute arbitrary commands.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/exim4-daemon-heavyto a version that resolves this vulnerability.Fixed in 4.91-6ubuntu1.1 - Upgrade
Upgrade
ubuntu/exim4-daemon-lightto a version that resolves this vulnerability.Fixed in 4.91-6ubuntu1.1 - Upgrade
Upgrade
ubuntu/exim4-daemon-heavyto a version that resolves this vulnerability.Fixed in 4.90.1-1ubuntu1.2 - Upgrade
Upgrade
ubuntu/exim4-daemon-lightto a version that resolves this vulnerability.Fixed in 4.90.1-1ubuntu1.2
Event History
Frequently Asked Questions
What is the severity of USN-4010-1?
The severity of USN-4010-1 is considered high due to the potential for remote code execution.
How do I fix USN-4010-1?
To fix USN-4010-1, upgrade to the corrected versions of Exim specified in the advisory.
What systems are affected by USN-4010-1?
USN-4010-1 affects Exim 4.90.1-1ubuntu1.2 and Exim 4.91-6ubuntu1.1 on Ubuntu 18.04 and 18.10.
What type of exploitation is possible with USN-4010-1?
A remote attacker could exploit USN-4010-1 to execute arbitrary commands on the affected systems.
What should I do if I cannot apply the update for USN-4010-1 immediately?
If you cannot apply the update immediately for USN-4010-1, consider implementing additional network security measures to limit exposure.