PT-2017-14649 · Exim+3 · Exim+3

Meh · Published 2017-11-23 · Updated 2024-06-15 · CVE-2017-16944

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Exim versions 4.88 through 4.89

Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop and stack exhaustion. This is achieved through vectors involving BDAT commands and an improper check for a '.' character that signifies the end of the content. The problem is related to the bdat getc function and the receive msg function in the SMTP daemon.

Recommendations For Exim versions 4.88 and 4.89, consider disabling the receive msg function or restricting the use of BDAT commands as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Use After Free

Infinite Loop

Weakness Enumeration

CWE-416

CWE-835

Related Identifiers

ALT-PU-2018-1409

ALT-PU-2020-2318

ALT-PU-2021-1764

ALT-PU-2022-2269

BDU:2018-00088

CVE-2017-16944

DSA-4053-1

OPENSUSE-SU-2017_3220-1

OPENSUSE-SU-2021:0677-1

OPENSUSE-SU-2021:0753-1

OPENSUSE-SU-2021:0754-1

OPENSUSE-SU-2021_0677-1

OPENSUSE-SU-2024:10746-1

USN-3499-1

Affected Products

Alt Linux

Exim

Suse

Ubuntu

References · 205

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/local/exim_perl_startup.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/exim4_deliver_message_priv_esc.rb · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/Stack-Clash.md · Exploit
• 🔥 https://github.com/lucky/bad_actor_poc · Exploit
• 🔥 https://github.com/synacktiv/Exim-CVE-2019-15846 · Exploit
• 🔥 https://github.com/LetUsFsck/PoC-Exploit-Mirror/tree/master/CVE-2017-16944 · Exploit
• 🔥 https://github.com/Diefunction/CVE-2019-10149 · Exploit
• 🔥 https://github.com/cowbe0x004/eximrce-CVE-2019-10149 · Exploit
• 🔥 https://github.com/MNEMO-CERT/PoC--CVE-2019-10149_Exim · Exploit
• 🔥 https://github.com/martinclauss/exim-rce-cve-2018-6789 · Exploit
• 🔥 https://github.com/synacktiv/Exim-CVE-2018-6789 · Exploit
• 🔥 https://github.com/AzizMea/CVE-2019-10149-privilege-escalation · Exploit
• 🔥 https://github.com/dorkerdevil/CVE-2020-28018 · Exploit
• 🔥 https://github.com/darsigovrustam/CVE-2019-10149 · Exploit
• 🔥 https://github.com/cloudflare/exim-cve-2019-10149-data · Exploit