openSUSE-SU-2023:0293-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2023:0293-1.json
JSON Data
https://api.osv.dev/v1/vulns/openSUSE-SU-2023:0293-1
Related
Published
2023-10-05T09:26:19Z
Modified
2023-10-05T09:26:19Z
Summary
Security update for exim
Details

This update for exim fixes the following issues:

  • CVE-2023-42114: NTLM Challenge Out-Of-Bounds Read Information Disclosure Vulnerability (boo#1215784)
  • CVE-2023-42115: AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability (boo#1215785)
  • CVE-2023-42116: SMTP Challenge Stack-based Buffer Overflow Remote Code Execution Vulnerability (boo#1215786)
References

Affected packages

SUSE:Package Hub 15 SP4 / exim

Package

Name
exim
Purl
pkg:rpm/suse/exim&distro=SUSE%20Package%20Hub%2015%20SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.94.2-bp155.5.3.1

Ecosystem specific 

{
    "binaries": [
        {
            "eximstats-html": "4.94.2-bp155.5.3.1",
            "exim": "4.94.2-bp155.5.3.1",
            "eximon": "4.94.2-bp155.5.3.1"
        }
    ]
}

SUSE:Package Hub 15 SP5 / exim

Package

Name
exim
Purl
pkg:rpm/suse/exim&distro=SUSE%20Package%20Hub%2015%20SP5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.94.2-bp155.5.3.1

Ecosystem specific 

{
    "binaries": [
        {
            "eximstats-html": "4.94.2-bp155.5.3.1",
            "exim": "4.94.2-bp155.5.3.1",
            "eximon": "4.94.2-bp155.5.3.1"
        }
    ]
}

openSUSE:Leap 15.4 / exim

Package

Name
exim
Purl
pkg:rpm/opensuse/exim&distro=openSUSE%20Leap%2015.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.94.2-bp155.5.3.1

Ecosystem specific 

{
    "binaries": [
        {
            "eximstats-html": "4.94.2-bp155.5.3.1",
            "exim": "4.94.2-bp155.5.3.1",
            "eximon": "4.94.2-bp155.5.3.1"
        }
    ]
}

openSUSE:Leap 15.5 / exim

Package

Name
exim
Purl
pkg:rpm/opensuse/exim&distro=openSUSE%20Leap%2015.5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.94.2-bp155.5.3.1

Ecosystem specific 

{
    "binaries": [
        {
            "eximstats-html": "4.94.2-bp155.5.3.1",
            "exim": "4.94.2-bp155.5.3.1",
            "eximon": "4.94.2-bp155.5.3.1"
        }
    ]
}