crítica
CVE-2017-16943
exim: use-after-free in receive_msg function via vectors involving BDAT commands
En la Trivy database desde, como mínimo, el 24 oct 2026, 07:11 UTCNo consta cuándo entró antes de ese build.
Severidad por fuente
NVD9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD, Red Hat, Amazon. Más baja según Ubuntu (alta).
Descripción
The receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via vectors involving BDAT commands.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| amazon linux 1 | exim, exim-debuginfo, exim-greylist y 3 más | 4.89-4.17.amzn1 |
| alpine 3.10 | exim | 4.89-r7 |
| alpine 3.11 | exim | 4.89-r7 |
| alpine 3.12 | exim | 4.89-r7 |
| alpine 3.13 | exim | 4.89-r7 |
| alpine 3.14 | exim | 4.89-r7 |
| alpine 3.15 | exim | 4.89-r7 |
| alpine 3.16 | exim | 4.89-r7 |
| alpine 3.17 | exim | 4.89-r7 |
| alpine 3.18 | exim | 4.89-r7 |
| alpine 3.19 | exim | 4.89-r7 |
| alpine 3.20 | exim | 4.89-r7 |
Mostrar las 33 entradas de 28 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| amazon linux 1 | exim | 4.89-4.17.amzn1 |
| amazon linux 1 | exim-debuginfo | 4.89-4.17.amzn1 |
| amazon linux 1 | exim-greylist | 4.89-4.17.amzn1 |
| amazon linux 1 | exim-mon | 4.89-4.17.amzn1 |
| amazon linux 1 | exim-mysql | 4.89-4.17.amzn1 |
| amazon linux 1 | exim-pgsql | 4.89-4.17.amzn1 |
| alpine 3.10 | exim | 4.89-r7 |
| alpine 3.11 | exim | 4.89-r7 |
| alpine 3.12 | exim | 4.89-r7 |
| alpine 3.13 | exim | 4.89-r7 |
| alpine 3.14 | exim | 4.89-r7 |
| alpine 3.15 | exim | 4.89-r7 |
| alpine 3.16 | exim | 4.89-r7 |
| alpine 3.17 | exim | 4.89-r7 |
| alpine 3.18 | exim | 4.89-r7 |
| alpine 3.19 | exim | 4.89-r7 |
| alpine 3.20 | exim | 4.89-r7 |
| alpine 3.21 | exim | 4.89-r7 |
| alpine 3.22 | exim | 4.89-r7 |
| alpine 3.23 | exim | 4.89-r7 |
| alpine 3.24 | exim | 4.89-r7 |
| alpine 3.7 | exim | 4.89-r7 |
| alpine 3.8 | exim | 4.89-r7 |
| alpine 3.9 | exim | 4.89-r7 |
| alpine edge | exim | 4.89-r7 |
| debian 11 | exim4 | 4.89-12 |
| debian 12 | exim4 | 4.89-12 |
| debian 13 | exim4 | 4.89-12 |
| debian 14 | exim4 | 4.89-12 |
| debian 9 | exim4 | 4.89-2+deb9u2 |
| echo | exim4 | 4.89-12 |
| ubuntu 17.04 | exim4 | 4.88-5ubuntu1.2 |
| ubuntu 17.10 | exim4 | 4.89-5ubuntu1.1 |
Referencias
- http://openwall.com/lists/oss-security/2017/11/25/1
- http://openwall.com/lists/oss-security/2017/11/25/2
- http://openwall.com/lists/oss-security/2017/11/25/3
- http://www.openwall.com/lists/oss-security/2021/05/04/7
- http://www.securitytracker.com/id/1039872
- https://access.redhat.com/security/cve/CVE-2017-16943
- https://bugs.exim.org/show_bug.cgi?id=2199
- https://git.exim.org/exim.git/commit/4090d62a4b25782129cc1643596dc2f6e8f63bde
Las 15 referencias
- https://git.exim.org/exim.git/commitdiff/4e6ae6235c68de243b1c2419027472d7659aa2b4
- https://github.com/LetUsFsck/PoC-Exploit-Mirror/tree/master/CVE-2017-16944
- https://lists.exim.org/lurker/message/20171125.034842.d1d75cac.en.html
- https://nvd.nist.gov/vuln/detail/CVE-2017-16943
- https://ubuntu.com/security/notices/USN-3493-1
- https://www.cve.org/CVERecord?id=CVE-2017-16943
- https://www.debian.org/security/2017/dsa-4053