Exim NTLM Challenge Out-Of-Bounds Read Information Disclosure Vulnerability

CVE-2023-42114

What is CVE-2023-42114?

The identified vulnerability in Exim involves a flaw in the handling of NTLM challenge requests, which permits remote attackers to exploit insufficient validation of user-supplied data. This oversight enables attackers to read beyond the end of allocated data structures, potentially leading to the disclosure of sensitive information linked to the service account used by the Exim Mail Server. Notably, no authentication is required to exploit this vulnerability, heightening the risk for affected installations.

References