PT-2020-6046 · Exim+3 · Exim+3

Published 2020-10-20 · Updated 2024-06-15 · CVE-2020-28020

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.92

Description The issue is related to an integer overflow to buffer overflow, where an unauthenticated remote attacker can execute arbitrary code. This is due to the mishandling of continuation lines during header-length restriction. The vulnerable function is receive msg(), which is part of the Exim message relay agent.

Recommendations For versions prior to 4.92, update to version 4.92 or later to resolve the issue. As a temporary workaround, consider restricting access to the receive msg() function until a patch is available.

Exploit

Fix

Integer Overflow

Argument Injection

Integer Underflow

Out of bounds Read

Buffer Overflow

RCE

Weakness Enumeration

CWE-190

CWE-88

CWE-191

CWE-125

CWE-119

CWE-20

Related Identifiers

BDU:2021-02761

BDU:2021-02763

BDU:2021-02764

BDU:2021-02767

BDU:2021-02769

CVE-2020-28020

DLA-2650-1

OPENSUSE-SU-2021:0677-1

OPENSUSE-SU-2021:0753-1

OPENSUSE-SU-2021:0754-1

OPENSUSE-SU-2021_0677-1

OPENSUSE-SU-2024:10746-1

USN-4934-1

USN-4934-2

Affected Products

Exim

Linuxmint

Suse

Ubuntu

References · 127

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/exim4_deliver_message_priv_esc.rb · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/Stack-Clash.md · Exploit
• 🔥 https://github.com/synacktiv/Exim-CVE-2019-15846 · Exploit
• 🔥 https://github.com/LetUsFsck/PoC-Exploit-Mirror/tree/master/CVE-2017-16944 · Exploit
• 🔥 https://github.com/Diefunction/CVE-2019-10149 · Exploit
• 🔥 https://github.com/cowbe0x004/eximrce-CVE-2019-10149 · Exploit
• 🔥 https://github.com/MNEMO-CERT/PoC--CVE-2019-10149_Exim · Exploit
• 🔥 https://github.com/martinclauss/exim-rce-cve-2018-6789 · Exploit
• 🔥 https://github.com/synacktiv/Exim-CVE-2018-6789 · Exploit
• 🔥 https://github.com/AzizMea/CVE-2019-10149-privilege-escalation · Exploit
• 🔥 https://github.com/darsigovrustam/CVE-2019-10149 · Exploit
• 🔥 https://github.com/dorkerdevil/CVE-2020-28018 · Exploit
• 🔥 https://github.com/cloudflare/exim-cve-2019-10149-data · Exploit
• 🔥❌ https://github.com/lmol/CVE-2020-28018 · Exploit, Deleted
• https://osv.dev/vulnerability/openSUSE-SU-2021:0754-1 · Vendor Advisory