Exim · Exim
CVE-2010-4344
Exim Heap-Based Buffer Overflow Vulnerability
What it is
Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session that includes two MAIL commands in conjunction with a large message containing crafted headers, leading to improper rejection logging.
CISA: Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session.
What to do
Apply updates per vendor instructions.
Deadline for US federal agencies: April 15, 2022
- Added to the CISA list
- March 25, 2022
- Published
- December 14, 2010
- Severity
- Critical 9.8 CVSS 3.1
- Chance of attacks in the next 30 days (EPSS)
- 72% in the top 0.6% of all known vulnerabilities
- Weakness
- CWE-119
- More details
- NVD · CVE.org · CISA
All references (20)
- http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00003.html
- http://www.redhat.com/support/errata/RHSA-2010-0970.html
- http://www.ubuntu.com/usn/USN-1032-1
- http://www.exim.org/lurker/message/20101207.215955.bb32d4f2.en.html
- http://bugs.exim.org/show_bug.cgi?id=787
- http://www.securitytracker.com/id?1024858
- http://www.vupen.com/english/advisories/2010/3186
- http://www.securityfocus.com/bid/45308
- http://www.metasploit.com/modules/exploit/unix/smtp/exim4_string_format
- http://atmail.com/blog/2010/atmail-6204-now-available/
- http://secunia.com/advisories/42576
- http://secunia.com/advisories/42587
- https://bugzilla.redhat.com/show_bug.cgi?id=661756
- http://lists.exim.org/lurker/message/20101210.164935.385e04d0.en.html
- http://secunia.com/advisories/40019
- http://www.vupen.com/english/advisories/2010/3172
- http://www.kb.cert.org/vuls/id/682457
- http://www.vupen.com/english/advisories/2010/3181
- http://secunia.com/advisories/42586
- http://www.vupen.com/english/advisories/2010/3317
More exploited flaws from Exim
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Mar 25, 2022 | Privilege Escalation | Exim | High 7.8 | 18% |
| Nov 3, 2021 | Buffer Overflow | Exim | Critical 9.8 | 82% |
| Mar 3, 2022 | Out-of-bounds Write | Exim Internet Mailer | Critical 9.8 | 42% |
| Jan 10, 2022 | Improper Input Validation | Mail Transfer Agent (MTA) | Critical 9.0 | >99.9% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.