Vulnerabilitycritical

New Critical Security Flaws Expose Exim Mail Servers to Remote Attacks

The Hacker Newsby @TheHackersNewsSep 30, 2023 · 04:14 UTC (Sep 30, 2023)3 min read2 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-42114 CVE-2023-42115 CVE-2023-42116 CVE-2023-42117 CVE-2023-42118 CVE-2023-42119 CVE-2019-10149

Tags: cve-2023-42114 cve-2023-42115 cve-2023-42116 cve-2023-42117 cve-2023-42118 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2019-10149	Unvalidated Email Recipient Enables Remote Command Execution in Exim MTA	9.8	100%	KEVPoC ×5	Jun 5, 2019 KEV Jan 10, 2022
CVE-2023-42115 +4 related CVEs CVE-2023-42117 CVE-2023-42116 CVE-2023-42114 CVE-2023-42119	Exim AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability	9.8 group max	10%		May 3, 2024
CVE-2023-42118	Exim libspf2 Integer Underflow Remote Code Execution Vulnerability	8.8	52%		May 3, 2024

From the original article

3 min read at thehackernews.com

 Ravie Lakshmanan  Sep 30, 2023 Email Security / Hacking News Multiple security vulnerabilities have been disclosed in the Exim mail transfer agent that, if successfully exploited, could result in information disclosure and remote code execution. The list of flaws, which were reported anonymously way back in June 2022, is as follows -

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.