First published: Mon Sep 16 2019(Updated: )
USN-4124-1 fixed a vulnerability in Exim. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: It was discovered that Exim incorrectly handled certain decoding operations. A remote attacker could possibly use this issue to execute arbitrary commands.
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
ubuntu/exim4-daemon-light | <4.82-3ubuntu2.4+esm1 | 4.82-3ubuntu2.4+esm1 |
Ubuntu Ubuntu | =14.04 | |
All of | ||
ubuntu/exim4-daemon-heavy | <4.82-3ubuntu2.4+esm1 | 4.82-3ubuntu2.4+esm1 |
Ubuntu Ubuntu | =14.04 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
USN-4124-2 is a security update for Exim on Ubuntu 14.04 ESM that addresses a vulnerability.
The vulnerability fixed by USN-4124-2 is related to Exim incorrectly handling certain decoding operations, which could potentially allow remote attackers to execute arbitrary commands.
The vulnerability affects Exim versions 4.82-3ubuntu2.4+esm1 of exim4-daemon-light and exim4-daemon-heavy on Ubuntu 14.04 ESM.
To fix the vulnerability, you should update to version 4.82-3ubuntu2.4+esm1 of exim4-daemon-light or exim4-daemon-heavy, depending on the package you are using, by applying the corresponding update provided by Ubuntu.
You can find more information about USN-4124-2, including the original advisory details and the security references, at the following link: [USN-4124-2](https://ubuntu.com/security/notices/USN-4124-2)