PT-2019-3248 · Exim+2 · Exim+2

Heiko Schlittermann · Published 2018-03-12 · Updated 2025-02-04 · CVE-2019-15846

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.92.2

Description The issue is related to errors in object handling in memory, allowing a remote attacker to gain access to confidential data, disrupt its integrity, and cause a denial of service. It also allows remote attackers to execute arbitrary code as root via a trailing backslash. The vulnerability can be exploited by sending a specially crafted client certificate or a modified value in the SNI. At least half a million email servers are potentially affected.

Recommendations For Exim versions prior to 4.92.2, update to version 4.92.2 to patch the issue. As a temporary workaround, consider disabling TLS support to minimize the risk of exploitation. Restrict access to the Exim server to prevent remote code execution attacks. Avoid using the SNI feature until the issue is resolved.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2018-1409

ALT-PU-2020-2318

ALT-PU-2021-1764

ALT-PU-2022-2269

BDU:2019-03238

CVE-2019-15846

DLA-1911-1

DSA-4517-1

OPENSUSE-SU-2019:2093-1

OPENSUSE-SU-2019_2093-1

OPENSUSE-SU-2021:0753-1

OPENSUSE-SU-2021_0677-1

OPENSUSE-SU-2024:10746-1

USN-4124-1

USN-4124-2

Affected Products

Exim

Suse

Ubuntu

References · 120

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/local/exim_perl_startup.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/exim4_deliver_message_priv_esc.rb · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/Stack-Clash.md · Exploit
• 🔥 https://github.com/lucky/bad_actor_poc · Exploit
• 🔥 https://github.com/synacktiv/Exim-CVE-2019-15846 · Exploit
• 🔥 https://github.com/LetUsFsck/PoC-Exploit-Mirror/tree/master/CVE-2017-16944 · Exploit
• 🔥 https://github.com/Diefunction/CVE-2019-10149 · Exploit
• 🔥 https://github.com/cowbe0x004/eximrce-CVE-2019-10149 · Exploit
• 🔥 https://github.com/MNEMO-CERT/PoC--CVE-2019-10149_Exim · Exploit
• 🔥 https://github.com/martinclauss/exim-rce-cve-2018-6789 · Exploit
• 🔥 https://github.com/synacktiv/Exim-CVE-2018-6789 · Exploit
• 🔥 https://github.com/AzizMea/CVE-2019-10149-privilege-escalation · Exploit
• 🔥 https://github.com/dorkerdevil/CVE-2020-28018 · Exploit
• 🔥 https://github.com/darsigovrustam/CVE-2019-10149 · Exploit
• 🔥 https://github.com/cloudflare/exim-cve-2019-10149-data · Exploit