Heist/ feed

Security feed

advisoryCISA Known Exploited Vulnerabilities

Exim Buffer Overflow Vulnerability

Exim contains a buffer overflow vulnerability in the base64d function part of the SMTP listener that may allow for remote code execution. CISA required action: Apply updates per vendor instructions.

EximCVE-2018-6789
Structured advisory · Revision 1Original source
Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2018-6789

Exim

Source reference: /product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record
Related CVEs
CVE-2018-6789

Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event
#3549 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement
advisoryCISA Known Exploited Vulnerabilities

Exim Heap-Based Buffer Overflow Vulnerability

Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session. CISA required action: Apply updates per vendor instructions.

EximCVE-2010-4344
Structured advisory · Revision 1Original source
Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2010-4344

Exim

Source reference: /product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record
Related CVEs
CVE-2010-4344

Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event
#2745 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement
advisoryCISA Known Exploited Vulnerabilities

Exim Privilege Escalation Vulnerability

Exim allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands. CISA required action: Apply updates per vendor instructions.

EximCVE-2010-4345
Structured advisory · Revision 1Original source
Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2010-4345

Exim

Source reference: /product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record
Related CVEs
CVE-2010-4345

Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event
#2744 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement