USN-6411-1

Dashboard / Vulnerabilities / USN-6411-1

USN-6411-1

Summary: exim4 vulnerabilities

Details: It was discovered that Exim incorrectly handled certain challenge requests. A remote attacker could possibly use this issue to perform out-of-bounds reads, resulting in information leakage. (CVE-2023-42114) It was discovered that Exim incorrectly handled validation of user-supplied data. A remote attacker could possibly use this issue to perform out-of-bounds writes, resulting in arbitrary code execution. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 23.04. (CVE-2023-42115) It was discovered that Exim incorrectly handled certain challenge requests. A remote attacker could possibly use this issue to perform out-of-bounds writes, resulting in arbitrary code execution. (CVE-2023-42116)

References: https://ubuntu.com/security/notices/USN-6411-1, https://ubuntu.com/security/CVE-2023-42114, https://ubuntu.com/security/CVE-2023-42115, https://ubuntu.com/security/CVE-2023-42116