9.8

CVE-2018-6789

Warnung
Exploit
An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By sending a handcrafted message, a buffer overflow may happen. This can be used to execute code remotely.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Exim ≫ Exim Version < 4.90.1
Debian ≫ Debian Linux Version 7.0
Debian ≫ Debian Linux Version 8.0
Debian ≫ Debian Linux Version 9.0
Canonical ≫ Ubuntu Linux Version 14.04 SwEdition esm
Canonical ≫ Ubuntu Linux Version 16.04 SwEdition esm
Canonical ≫ Ubuntu Linux Version 17.10

03.11.2021: CISA Known Exploited Vulnerabilities (KEV) Catalog

Exim Buffer Overflow Vulnerability

Schwachstelle

Exim contains a buffer overflow vulnerability in the base64d function part of the SMTP listener that may allow for remote code execution.

Beschreibung

Apply updates per vendor instructions.

Erforderliche Maßnahmen
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 81.72% 0.996
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CISA-ADP 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

http://openwall.com/lists/oss-security/2018/02/10/2
Third Party Advisory
Mailing List
http://packetstormsecurity.com/files/162959/Exim-base64d-Buffer-Overflow.html
Third Party Advisory
Exploit
VDB Entry
http://www.openwall.com/lists/oss-security/2018/02/07/2
Third Party Advisory
Mailing List
http://www.securityfocus.com/bid/103049
Third Party Advisory
Broken Link
VDB Entry
http://www.securitytracker.com/id/1040461
Third Party Advisory
Broken Link
VDB Entry
https://devco.re/blog/2018/03/06/exim-off-by-one-RCE-exploiting-CVE-2018-6789-en/
Third Party Advisory
Exploit
https://exim.org/static/doc/security/CVE-2018-6789.txt
Vendor Advisory
https://git.exim.org/exim.git/commit/cf3cd306062a08969c41a1cdd32c6855f1abecf1
Patch
https://lists.debian.org/debian-lts-announce/2018/02/msg00009.html
Third Party Advisory
Mailing List
https://usn.ubuntu.com/3565-1/
Third Party Advisory
https://www.debian.org/security/2018/dsa-4110
Third Party Advisory
Mailing List
https://www.exploit-db.com/exploits/44571/
Third Party Advisory
Exploit
VDB Entry
https://www.exploit-db.com/exploits/45671/
Third Party Advisory
Exploit
VDB Entry
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-6789
US Government Resource