PT-2022-6995 · Exim+3 · Exim Libspf2+3

Published 2022-06-06 · Updated 2026-02-01 · CVE-2023-42118

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Exim libspf2 (affected versions not specified)

Description This issue allows network-adjacent attackers to execute arbitrary code on affected installations of Exim libspf2. The flaw exists within the parsing of SPF macros, where the process does not properly validate user-supplied data, resulting in an integer underflow before writing to memory. An attacker can leverage this to execute code in the context of the service account.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Integer Underflow

Integer Overflow

Weakness Enumeration

CWE-191

CWE-190

Related Identifiers

BDU:2023-06275

CVE-2023-42118

OESA-2024-2584

OESA-2024-2585

OESA-2024-2586

OESA-2025-1077

ROSA-SA-2024-2528

ZDI-23-1472

Affected Products

Astra Linux

Debian

Exim Libspf2

Red Os

References · 48

• https://safe-surf.ru/specialists/bulletins-nkcki/699420 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-42118 · Security Note
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-1216SE59 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-42118 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-42118 · Security Note
• https://osv.dev/vulnerability/OESA-2024-2586 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-42118 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-42118 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-0811SE18 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-42118 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-1077 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-23-1472 · Security Note
• https://osv.dev/vulnerability/ALPINE-CVE-2023-42118 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2024-2584 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2024-2585 · Vendor Advisory