An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By sending a handcrafted message, a buffer overflow may happen. This can be used to execute code remotely.
{ "binaries": [ { "binary_name": "exim4", "binary_version": "4.82-3ubuntu2.4" }, { "binary_name": "exim4-base", "binary_version": "4.82-3ubuntu2.4" }, { "binary_name": "exim4-base-dbgsym", "binary_version": "4.82-3ubuntu2.4" }, { "binary_name": "exim4-config", "binary_version": "4.82-3ubuntu2.4" }, { "binary_name": "exim4-daemon-heavy", "binary_version": "4.82-3ubuntu2.4" }, { "binary_name": "exim4-daemon-heavy-dbg", "binary_version": "4.82-3ubuntu2.4" }, { "binary_name": "exim4-daemon-heavy-dbgsym", "binary_version": "4.82-3ubuntu2.4" }, { "binary_name": "exim4-daemon-light", "binary_version": "4.82-3ubuntu2.4" }, { "binary_name": "exim4-daemon-light-dbg", "binary_version": "4.82-3ubuntu2.4" }, { "binary_name": "exim4-daemon-light-dbgsym", "binary_version": "4.82-3ubuntu2.4" }, { "binary_name": "exim4-dbg", "binary_version": "4.82-3ubuntu2.4" }, { "binary_name": "exim4-dev", "binary_version": "4.82-3ubuntu2.4" }, { "binary_name": "eximon4", "binary_version": "4.82-3ubuntu2.4" }, { "binary_name": "eximon4-dbgsym", "binary_version": "4.82-3ubuntu2.4" } ], "availability": "No subscription required", "ubuntu_priority": "medium" }
{ "binaries": [ { "binary_name": "exim4", "binary_version": "4.86.2-2ubuntu2.3" }, { "binary_name": "exim4-base", "binary_version": "4.86.2-2ubuntu2.3" }, { "binary_name": "exim4-base-dbgsym", "binary_version": "4.86.2-2ubuntu2.3" }, { "binary_name": "exim4-config", "binary_version": "4.86.2-2ubuntu2.3" }, { "binary_name": "exim4-daemon-heavy", "binary_version": "4.86.2-2ubuntu2.3" }, { "binary_name": "exim4-daemon-heavy-dbg", "binary_version": "4.86.2-2ubuntu2.3" }, { "binary_name": "exim4-daemon-heavy-dbgsym", "binary_version": "4.86.2-2ubuntu2.3" }, { "binary_name": "exim4-daemon-light", "binary_version": "4.86.2-2ubuntu2.3" }, { "binary_name": "exim4-daemon-light-dbg", "binary_version": "4.86.2-2ubuntu2.3" }, { "binary_name": "exim4-daemon-light-dbgsym", "binary_version": "4.86.2-2ubuntu2.3" }, { "binary_name": "exim4-dbg", "binary_version": "4.86.2-2ubuntu2.3" }, { "binary_name": "exim4-dev", "binary_version": "4.86.2-2ubuntu2.3" }, { "binary_name": "eximon4", "binary_version": "4.86.2-2ubuntu2.3" }, { "binary_name": "eximon4-dbgsym", "binary_version": "4.86.2-2ubuntu2.3" } ], "availability": "No subscription required", "ubuntu_priority": "medium" }