USN-4141-1: Exim vulnerability
It was discovered that Exim incorrectly handled certain string operations. A remote attacker could use this issue to cause Exim to crash, resulting in a denial of service, or possibly execute arbitrary code.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/exim4-daemon-heavyto a version that resolves this vulnerability.Fixed in 4.92-4ubuntu1.4 - Upgrade
Upgrade
ubuntu/exim4-daemon-lightto a version that resolves this vulnerability.Fixed in 4.92-4ubuntu1.4
Event History
Frequently Asked Questions
What is the severity of USN-4141-1?
The severity of USN-4141-1 is critical due to the potential for denial of service and arbitrary code execution.
How do I fix USN-4141-1?
To fix USN-4141-1, upgrade Exim to the version 4.92-4ubuntu1.4 or later.
Which Exim versions are affected by USN-4141-1?
USN-4141-1 affects Exim versions prior to 4.92-4ubuntu1.4 for Ubuntu 19.04.
Can USN-4141-1 be exploited remotely?
Yes, USN-4141-1 can be exploited remotely by an attacker to cause a crash or execute code.
What software is impacted by the USN-4141-1 vulnerability?
The software impacted by USN-4141-1 includes exim4-daemon-heavy and exim4-daemon-light on Ubuntu 19.04.