Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4wmr-6rg6-hfcg

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Exim 4 before 4.94.2 allows Buffer Underwrite that may result in unauthenticated remote attackers executing arbitrary commands, because smtp_ungetc was only intended to push back characters, but can actually push back non-character error codes such as EOF.

Exim 4 before 4.94.2 allows Buffer Underwrite that may result in unauthenticated remote attackers executing arbitrary commands, because smtp_ungetc was only intended to push back characters, but can actually push back non-character error codes such as EOF.

EPSS

Процентиль: 88%
0.04055
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-119

Связанные уязвимости

CVSS3: 9.8
ubuntu
почти 5 лет назад

Exim 4 before 4.94.2 allows Buffer Underwrite that may result in unauthenticated remote attackers executing arbitrary commands, because smtp_ungetc was only intended to push back characters, but can actually push back non-character error codes such as EOF.

CVSS3: 9.8
nvd
почти 5 лет назад

Exim 4 before 4.94.2 allows Buffer Underwrite that may result in unauthenticated remote attackers executing arbitrary commands, because smtp_ungetc was only intended to push back characters, but can actually push back non-character error codes such as EOF.

CVSS3: 9.8
debian
почти 5 лет назад

Exim 4 before 4.94.2 allows Buffer Underwrite that may result in unaut ...

CVSS3: 9.8
fstec
больше 5 лет назад

Уязвимость функции smtp_ungetc() агента пересылки сообщений Exim, связанная с целочисленным переполнением, позволяющая нарушителю выполнить произвольный код

suse-cvrf
больше 4 лет назад

Security update for exim

EPSS

Процентиль: 88%
0.04055
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-119