ALERT — New 21Nails Exim Bugs Expose Millions of Email Servers to Hacking
- CVEs
- CVE-2020-28017CVE-2020-28007CVE-2020-28008CVE-2020-28014CVE-2021-27216CVE-2020-28011CVE-2020-28010CVE-2020-28013CVE-2020-28016CVE-2020-28015CVE-2020-28012CVE-2020-28009CVE-2020-28020CVE-2020-28023CVE-2020-28021CVE-2020-28022CVE-2020-28026CVE-2020-28019CVE-2020-28024CVE-2020-28018CVE-2020-28025CVE-2019-10149
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2019-10149 | Unvalidated Email Recipient Enables Remote Command Execution in Exim MTA | 9.8 | 100% | KEVPoC ×5 | KEV |
| CVE-2020-28018 | Exim 4 before 4.94.2 allows Use After Free in smtp_reset in certain situations that may be common for builds with OpenSSL | 9.8 group max | 57% |
From the original article
2 min read at thehackernews.com
The maintainers of Exim have released patches to remediate as many as 21 security vulnerabilities in its software that could enable unauthenticated attackers to achieve complete remote code execution and gain root privileges. Collectively named '21Nails ,' the flaws include 11 vulnerabilities that require local access to the server and 10 other weaknesses that could be exploited remotely.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.