USN-4366-1: Exim vulnerability
Published May 19, 2020
·Updated
It was discovered that Exim incorrectly handled certain inputs. An remote attacker could possibly use this issue to access sensitive information or authentication bypass.
Affected Software
30 affected componentsFixes available
All of the following
ubuntu/exim4-base<4.93-13ubuntu1.1
4.93-13ubuntu1.1
Ubuntu Ubuntu=20.04
All of the following
ubuntu/exim4-daemon-heavy<4.93-13ubuntu1.1
4.93-13ubuntu1.1
Ubuntu Ubuntu=20.04
All of the following
ubuntu/exim4-daemon-light<4.93-13ubuntu1.1
4.93-13ubuntu1.1
Ubuntu Ubuntu=20.04
All of the following
ubuntu/exim4-base<4.92.1-1ubuntu3.1
4.92.1-1ubuntu3.1
Ubuntu Ubuntu=19.10
All of the following
ubuntu/exim4-daemon-heavy<4.92.1-1ubuntu3.1
4.92.1-1ubuntu3.1
Ubuntu Ubuntu=19.10
All of the following
ubuntu/exim4-daemon-light<4.92.1-1ubuntu3.1
4.92.1-1ubuntu3.1
Ubuntu Ubuntu=19.10
All of the following
ubuntu/exim4-base<4.90.1-1ubuntu1.5
4.90.1-1ubuntu1.5
Ubuntu Ubuntu=18.04
All of the following
ubuntu/exim4-daemon-heavy<4.90.1-1ubuntu1.5
4.90.1-1ubuntu1.5
Ubuntu Ubuntu=18.04
All of the following
ubuntu/exim4-daemon-light<4.90.1-1ubuntu1.5
4.90.1-1ubuntu1.5
Ubuntu Ubuntu=18.04
All of the following
ubuntu/exim4-base<4.86.2-2ubuntu2.6
4.86.2-2ubuntu2.6
Ubuntu Ubuntu=16.04
All of the following
ubuntu/exim4-daemon-heavy<4.86.2-2ubuntu2.6
4.86.2-2ubuntu2.6
Ubuntu Ubuntu=16.04
All of the following
ubuntu/exim4-daemon-light<4.86.2-2ubuntu2.6
4.86.2-2ubuntu2.6
Ubuntu Ubuntu=16.04
All of the following
ubuntu/exim4-base<4.82-3ubuntu2.4+esm2
4.82-3ubuntu2.4+esm2
Ubuntu Ubuntu=14.04
All of the following
ubuntu/exim4-daemon-heavy<4.82-3ubuntu2.4+esm2
4.82-3ubuntu2.4+esm2
Ubuntu Ubuntu=14.04
All of the following
ubuntu/exim4-daemon-light<4.82-3ubuntu2.4+esm2
4.82-3ubuntu2.4+esm2
Ubuntu Ubuntu=14.04
Event History
May 19, 2020
Advisory Published
via Ubuntu·12:00 AM
Frequently Asked Questions
1
What is the vulnerability ID for the Exim vulnerability?
The vulnerability ID for the Exim vulnerability is USN-4366-1.
2
How does the Exim vulnerability impact systems?
The Exim vulnerability can allow remote attackers to access sensitive information or bypass authentication.
3
Which software versions are affected by the Exim vulnerability?
The Exim vulnerability affects various versions of Exim packages on Ubuntu 14.04, 16.04, 18.04, 19.10, and 20.04.
4
What is the severity of the Exim vulnerability?
The severity of the Exim vulnerability is not specified in the provided information.
5
How can I fix the Exim vulnerability?
To fix the Exim vulnerability, update the Exim packages to the specified remedial versions provided by Ubuntu.