Exim AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability
CVE-2023-42115

9.8CRITICAL

Key Information:

Vendor

Exim

Status
Exim
Vendor
CVE Published:
3 May 2024

What is CVE-2023-42115?

A significant vulnerability has been identified in the Exim Mail Transfer Agent, specifically linked to the smtp service running on TCP port 25. The flaw arises due to inadequate validation of user-supplied data, which allows attackers to perform out-of-bounds writes. This weakness enables an attacker to execute arbitrary code within the context of the service account, facilitating potential system compromise without the need for authentication. The exploit of this vulnerability poses severe risks to affected installations, making immediate attention and patching critical.

Affected Version(s)

Exim exim 4.95

References

https://www.zerodayinitiative.com/advisories/ZDI-23-1469/
x_research-advisory

EPSS Score

63% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.