USN-6611-1: Exim vulnerability
It was discovered that Exim incorrectly handled certain requests. A remote attacker could possibly use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism.
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-6611-1?
The severity of USN-6611-1 is considered high due to the potential for remote email spoofing that could bypass SPF protections.
How do I fix USN-6611-1?
To fix USN-6611-1, upgrade Exim to version 4.96-17ubuntu2.2 for Ubuntu 23.10 or the respective fixed versions for earlier releases.
What products are affected by USN-6611-1?
Affected products include Exim4, Exim4-base, and Eximon4 on various versions of Ubuntu such as 16.04, 18.04, 20.04, 22.04, and 23.10.
Can I be attacked if I don't update for USN-6611-1?
Yes, if you do not update, your system remains vulnerable to remote attackers exploiting email spoofing techniques associated with USN-6611-1.
What type of vulnerability is described in USN-6611-1?
USN-6611-1 describes a vulnerability related to improper request handling in Exim that allows the injection of spoofed email messages.