Exim through 4.93 has an out-of-bounds read in the SPA authenticator that could result in SPA/NTLM authentication bypass in auths/spa.c and auths/auth-spa.c.
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "binaries": [ { "binary_name": "exim4", "binary_version": "4.82-3ubuntu2.4+esm2" }, { "binary_name": "exim4-base", "binary_version": "4.82-3ubuntu2.4+esm2" }, { "binary_name": "exim4-base-dbgsym", "binary_version": "4.82-3ubuntu2.4+esm2" }, { "binary_name": "exim4-config", "binary_version": "4.82-3ubuntu2.4+esm2" }, { "binary_name": "exim4-daemon-heavy", "binary_version": "4.82-3ubuntu2.4+esm2" }, { "binary_name": "exim4-daemon-heavy-dbg", "binary_version": "4.82-3ubuntu2.4+esm2" }, { "binary_name": "exim4-daemon-heavy-dbgsym", "binary_version": "4.82-3ubuntu2.4+esm2" }, { "binary_name": "exim4-daemon-light", "binary_version": "4.82-3ubuntu2.4+esm2" }, { "binary_name": "exim4-daemon-light-dbg", "binary_version": "4.82-3ubuntu2.4+esm2" }, { "binary_name": "exim4-daemon-light-dbgsym", "binary_version": "4.82-3ubuntu2.4+esm2" }, { "binary_name": "exim4-dbg", "binary_version": "4.82-3ubuntu2.4+esm2" }, { "binary_name": "exim4-dev", "binary_version": "4.82-3ubuntu2.4+esm2" }, { "binary_name": "eximon4", "binary_version": "4.82-3ubuntu2.4+esm2" }, { "binary_name": "eximon4-dbgsym", "binary_version": "4.82-3ubuntu2.4+esm2" } ], "ubuntu_priority": "medium" }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "exim4", "binary_version": "4.86.2-2ubuntu2.6" }, { "binary_name": "exim4-base", "binary_version": "4.86.2-2ubuntu2.6" }, { "binary_name": "exim4-base-dbgsym", "binary_version": "4.86.2-2ubuntu2.6" }, { "binary_name": "exim4-config", "binary_version": "4.86.2-2ubuntu2.6" }, { "binary_name": "exim4-daemon-heavy", "binary_version": "4.86.2-2ubuntu2.6" }, { "binary_name": "exim4-daemon-heavy-dbg", "binary_version": "4.86.2-2ubuntu2.6" }, { "binary_name": "exim4-daemon-heavy-dbgsym", "binary_version": "4.86.2-2ubuntu2.6" }, { "binary_name": "exim4-daemon-light", "binary_version": "4.86.2-2ubuntu2.6" }, { "binary_name": "exim4-daemon-light-dbg", "binary_version": "4.86.2-2ubuntu2.6" }, { "binary_name": "exim4-daemon-light-dbgsym", "binary_version": "4.86.2-2ubuntu2.6" }, { "binary_name": "exim4-dbg", "binary_version": "4.86.2-2ubuntu2.6" }, { "binary_name": "exim4-dev", "binary_version": "4.86.2-2ubuntu2.6" }, { "binary_name": "eximon4", "binary_version": "4.86.2-2ubuntu2.6" }, { "binary_name": "eximon4-dbgsym", "binary_version": "4.86.2-2ubuntu2.6" } ], "ubuntu_priority": "medium" }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "exim4", "binary_version": "4.90.1-1ubuntu1.5" }, { "binary_name": "exim4-base", "binary_version": "4.90.1-1ubuntu1.5" }, { "binary_name": "exim4-base-dbgsym", "binary_version": "4.90.1-1ubuntu1.5" }, { "binary_name": "exim4-config", "binary_version": "4.90.1-1ubuntu1.5" }, { "binary_name": "exim4-daemon-heavy", "binary_version": "4.90.1-1ubuntu1.5" }, { "binary_name": "exim4-daemon-heavy-dbgsym", "binary_version": "4.90.1-1ubuntu1.5" }, { "binary_name": "exim4-daemon-light", "binary_version": "4.90.1-1ubuntu1.5" }, { "binary_name": "exim4-daemon-light-dbgsym", "binary_version": "4.90.1-1ubuntu1.5" }, { "binary_name": "exim4-dev", "binary_version": "4.90.1-1ubuntu1.5" }, { "binary_name": "eximon4", "binary_version": "4.90.1-1ubuntu1.5" }, { "binary_name": "eximon4-dbgsym", "binary_version": "4.90.1-1ubuntu1.5" } ], "ubuntu_priority": "medium" }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "exim4", "binary_version": "4.93-13ubuntu1.1" }, { "binary_name": "exim4-base", "binary_version": "4.93-13ubuntu1.1" }, { "binary_name": "exim4-base-dbgsym", "binary_version": "4.93-13ubuntu1.1" }, { "binary_name": "exim4-config", "binary_version": "4.93-13ubuntu1.1" }, { "binary_name": "exim4-daemon-heavy", "binary_version": "4.93-13ubuntu1.1" }, { "binary_name": "exim4-daemon-heavy-dbgsym", "binary_version": "4.93-13ubuntu1.1" }, { "binary_name": "exim4-daemon-light", "binary_version": "4.93-13ubuntu1.1" }, { "binary_name": "exim4-daemon-light-dbgsym", "binary_version": "4.93-13ubuntu1.1" }, { "binary_name": "exim4-dev", "binary_version": "4.93-13ubuntu1.1" }, { "binary_name": "eximon4", "binary_version": "4.93-13ubuntu1.1" }, { "binary_name": "eximon4-dbgsym", "binary_version": "4.93-13ubuntu1.1" } ], "ubuntu_priority": "medium" }