Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2011-1764 (GCVE-0-2011-1764)
Vulnerability from cvelistv5 – Published: 2011-10-05 01:00 – Updated: 2024-08-06 22:37
VLAI?
EPSS
Summary
Format string vulnerability in the dkim_exim_verify_finish function in src/dkim.c in Exim before 4.76 might allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via format string specifiers in data used in DKIM logging, as demonstrated by an identity field containing a % (percent) character.
Severity ?
No CVSS data available.
CWE
- n/a
Assigner
References
7 references
| URL | Tags |
|---|---|
| http://secunia.com/advisories/51155 | third-party-advisoryx_refsource_SECUNIA |
| http://lists.opensuse.org/opensuse-security-annou… | vendor-advisoryx_refsource_SUSE |
| http://www.debian.org/security/2011/dsa-2232 | vendor-advisoryx_refsource_DEBIAN |
| http://git.exim.org/exim.git/commit/337e3505b0e6c… | x_refsource_CONFIRM |
| https://bugzilla.redhat.com/show_bug.cgi?id=702474 | x_refsource_CONFIRM |
| http://bugs.exim.org/show_bug.cgi?id=1106 | x_refsource_CONFIRM |
| http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=624670 | x_refsource_CONFIRM |
Date Public ?
2011-05-05 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T22:37:25.837Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "51155",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/51155"
},
{
"name": "SUSE-SR:2011:009",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html"
},
{
"name": "DSA-2232",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2011/dsa-2232"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://git.exim.org/exim.git/commit/337e3505b0e6cd4309db6bf6062b33fa56e06cf8"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=702474"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://bugs.exim.org/show_bug.cgi?id=1106"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=624670"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2011-05-05T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Format string vulnerability in the dkim_exim_verify_finish function in src/dkim.c in Exim before 4.76 might allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via format string specifiers in data used in DKIM logging, as demonstrated by an identity field containing a % (percent) character."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2014-02-10T16:57:01.000Z",
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat"
},
"references": [
{
"name": "51155",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/51155"
},
{
"name": "SUSE-SR:2011:009",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html"
},
{
"name": "DSA-2232",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2011/dsa-2232"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://git.exim.org/exim.git/commit/337e3505b0e6cd4309db6bf6062b33fa56e06cf8"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=702474"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://bugs.exim.org/show_bug.cgi?id=1106"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=624670"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2011-1764",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Format string vulnerability in the dkim_exim_verify_finish function in src/dkim.c in Exim before 4.76 might allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via format string specifiers in data used in DKIM logging, as demonstrated by an identity field containing a % (percent) character."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "51155",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/51155"
},
{
"name": "SUSE-SR:2011:009",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html"
},
{
"name": "DSA-2232",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2011/dsa-2232"
},
{
"name": "http://git.exim.org/exim.git/commit/337e3505b0e6cd4309db6bf6062b33fa56e06cf8",
"refsource": "CONFIRM",
"url": "http://git.exim.org/exim.git/commit/337e3505b0e6cd4309db6bf6062b33fa56e06cf8"
},
{
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=702474",
"refsource": "CONFIRM",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=702474"
},
{
"name": "http://bugs.exim.org/show_bug.cgi?id=1106",
"refsource": "CONFIRM",
"url": "http://bugs.exim.org/show_bug.cgi?id=1106"
},
{
"name": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=624670",
"refsource": "CONFIRM",
"url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=624670"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"assignerShortName": "redhat",
"cveId": "CVE-2011-1764",
"datePublished": "2011-10-05T01:00:00.000Z",
"dateReserved": "2011-04-19T00:00:00.000Z",
"dateUpdated": "2024-08-06T22:37:25.837Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2011-1764",
"date": "2026-05-15",
"epss": "0.04718",
"percentile": "0.89494"
},
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"4.75\", \"matchCriteriaId\": \"7C36CD99-E19F-41D3-AAB1-1F413B2BF115\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:2.10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DCB4B1A4-A631-4D25-B7F1-C180098E86AD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:2.11:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"AE701510-2879-4C78-8C1D-151D5C527B4B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:2.12:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"00FEC5EC-EE91-4702-BD9D-4023243AA7C9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:3.00:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CB2BAB64-3A0B-4B8D-8C9A-726435218123\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:3.01:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7BAF74CC-9C39-4FB6-94B5-26865A8BBA5F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:3.02:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5F3BC841-2C51-4CBD-B666-FCB531F43AC4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:3.03:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"69C84D14-E466-4FD3-B79C-D227AD178E4C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:3.10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3B5B15C1-3D3E-4875-AD4A-69798309DB3F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:3.11:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"64368CD7-9F8C-4D33-98B5-2F429A1F77DF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:3.12:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"40751F4F-46A3-4047-8532-CBEF2328D99C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:3.13:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C38566A6-B0A0-4228-A038-04817FFD543F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:3.14:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D1432D82-EA09-4C8B-A82D-BA41E14D3FE9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:3.15:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0E5C3CA8-00BF-4A35-AA5B-45D21CC2F965\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:3.16:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"90E35B41-4048-43AD-8DF0-7B4088869A88\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:3.20:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3114B51A-E651-4095-B817-0978673FDE6F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:3.21:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D6A6FC30-6AF0-4382-95B0-1672929F8150\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:3.22:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"97A2321F-017F-4D7F-A27A-22725912ABA3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:3.30:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A2187D70-7ADA-401E-B03E-E1A92D9CDD59\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:3.31:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C8639E64-721A-4155-B775-CD3F775356F1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:3.32:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DA92BC83-33D0-4387-8C93-F2F0754E227A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:3.33:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F7E7B583-CB1D-43FE-A05C-4B31F64FD6A6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:3.34:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A35D9EF0-0267-4092-BC67-4C4B842B8ABF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:3.35:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5FE35F22-5B61-45A4-B8A2-67B8E792D58C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:3.36:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BC707056-63FC-4E61-A9A3-F89FE0E490E8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:4.00:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"92A7C49F-8826-47A5-BA9E-28472DFC5EFB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:4.01:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"52B3A794-43C7-4071-8E5A-EA209903165F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:4.02:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"84DBC4E0-608F-40AA-AE30-D40D72F9BED4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:4.03:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"71998344-4AC0-473F-980C-D8D0077E19A3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:4.04:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"42DA6BCE-7F17-4426-B514-3D50C764F4C0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:4.05:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"032862E6-F4CB-4E0E-93CA-0663E8536A1E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:4.10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0EC43E6B-2DA9-496E-BAD2-04FF4C3A53FA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:4.11:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9FF31403-56FE-48D4-A93C-91B4DC89489B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:4.12:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CB5A240D-CA4D-4929-BA60-DBE621A4E6F9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:4.14:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6BE1A094-2760-49CA-84A8-84B19BE2BE59\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:4.20:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"04C4B45D-A0AC-42B3-99D7-91F7B8D15B69\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:4.21:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"ED822CDF-C94B-4A16-BEEB-FECE51CBB744\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:4.22:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B52A1ECA-44CC-4DDE-B1AD-25AE27605317\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:4.23:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3E7D5D6F-8FDB-4AC2-A4D9-16E632AC8EAC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:4.24:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A4FEC2B4-BD68-428E-91BC-BC85F72E3BE8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:4.30:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"23EEBB47-2495-4FDB-9A55-415DA69392E8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:4.31:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D4A8E154-32CC-4665-82A0-1DE7A51B2435\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:4.32:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4B594190-DF8F-45AE-8579-BD7B4568606F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:4.33:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BD2D8712-4DF9-4A73-93A7-7719C3502E18\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:4.34:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2D9DF054-4CBF-4BA7-9A42-5627DC4B6A68\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:4.40:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B13E6533-BEB9-4082-9063-7E3CCBF4C36C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:4.41:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"879B9641-3245-4CF7-912A-FD21372F46F4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:4.42:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A91CA841-BBCA-4EF9-BC00-478A18797941\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:4.43:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"EEA3F58C-3EF2-48B9-9171-7EFE72B1A3DD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:4.44:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"AFB37C45-54E7-4E91-8E6D-0A3E764E1702\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:4.50:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"31CBE3C0-4918-4FA6-B1E7-6336913EF8D6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:4.51:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FC45BCE0-F190-4050-8B3B-869D0C1033AE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:4.52:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6FD0E5A4-3FCB-46C1-A709-CA15D96FA9B0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:4.53:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D3335C80-97AE-42DB-B125-0D3FA57D8317\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:4.54:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0F83560A-BDD7-456D-846C-D1DAF5C9DA64\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:4.60:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"22B9FD06-13E3-47CA-AB67-691DC3A9C330\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:4.61:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"EE2A81F2-3E53-4A31-BCC6-BDC0E1B62CC8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:4.62:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2A03C071-87BF-4D5E-ABED-472ABAEFAC71\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:4.63:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D1D96C53-989C-42C8-9E71-A206B78ED55A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:4.64:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"30190EAB-7140-4E0A-B7A5-8FA8BD0749C9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:4.65:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E0BD63C5-C916-4D7D-AE81-7B9676FC0951\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:4.66:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CCD8FE2F-8D53-407A-BB83-EB7725456D71\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:4.67:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"162F5CB4-1931-4236-8519-DD63A98BCEE0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:4.68:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9EF06704-E078-42FA-89DA-7BCA169D0E5B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:4.69:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B8F2CB6E-1ED1-4E56-9532-30D2BA6A53DD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:4.70:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"452E9C94-B7FF-40A9-A7F9-FC38824F6135\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:4.71:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A8EB3709-D51F-46D1-99B8-CFB4C2275077\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:4.72:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CBDB2156-072B-4392-9DC8-266FF1B8C7A4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:4.73:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"02F8A053-4578-4C45-A193-C188E45ED010\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:exim:exim:4.74:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A5DC11D6-F67F-40A8-B8BF-2E76DD2F9091\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"Format string vulnerability in the dkim_exim_verify_finish function in src/dkim.c in Exim before 4.76 might allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via format string specifiers in data used in DKIM logging, as demonstrated by an identity field containing a % (percent) character.\"}, {\"lang\": \"es\", \"value\": \"Vulnerabilidad de formato de cadena en la funci\\u00f3n dkim_exim_verify_finish de src/dkim.c de Exim en versiones anteriores a 4.76. Puede permitir a atacantes remotos ejecutar c\\u00f3digo arbitrario o provocar una denegaci\\u00f3n de servicio (ca\\u00edda del demonio) a trav\\u00e9s de especificadores de formato de cadena en datos usados en el logging DKIM, tal como se ha demostrado en un campo identity que contenga un car\\u00e1cter % (tanto por ciento).\"}]",
"id": "CVE-2011-1764",
"lastModified": "2024-11-21T01:27:00.067",
"metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:N/C:P/I:P/A:P\", \"baseScore\": 7.5, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"HIGH\", \"exploitabilityScore\": 10.0, \"impactScore\": 6.4, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
"published": "2011-10-05T02:56:24.707",
"references": "[{\"url\": \"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=624670\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Patch\"]}, {\"url\": \"http://bugs.exim.org/show_bug.cgi?id=1106\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Patch\"]}, {\"url\": \"http://git.exim.org/exim.git/commit/337e3505b0e6cd4309db6bf6062b33fa56e06cf8\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Patch\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://secunia.com/advisories/51155\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.debian.org/security/2011/dsa-2232\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=702474\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Patch\"]}, {\"url\": \"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=624670\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"http://bugs.exim.org/show_bug.cgi?id=1106\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"http://git.exim.org/exim.git/commit/337e3505b0e6cd4309db6bf6062b33fa56e06cf8\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/51155\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.debian.org/security/2011/dsa-2232\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=702474\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}]",
"sourceIdentifier": "secalert@redhat.com",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-134\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2011-1764\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2011-10-05T02:56:24.707\",\"lastModified\":\"2026-04-29T01:13:23.040\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Format string vulnerability in the dkim_exim_verify_finish function in src/dkim.c in Exim before 4.76 might allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via format string specifiers in data used in DKIM logging, as demonstrated by an identity field containing a % (percent) character.\"},{\"lang\":\"es\",\"value\":\"Vulnerabilidad de formato de cadena en la funci\u00f3n dkim_exim_verify_finish de src/dkim.c de Exim en versiones anteriores a 4.76. Puede permitir a atacantes remotos ejecutar c\u00f3digo arbitrario o provocar una denegaci\u00f3n de servicio (ca\u00edda del demonio) a trav\u00e9s de especificadores de formato de cadena en datos usados en el logging DKIM, tal como se ha demostrado en un campo identity que contenga un car\u00e1cter % (tanto por ciento).\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:P/I:P/A:P\",\"baseScore\":7.5,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-134\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"4.75\",\"matchCriteriaId\":\"7C36CD99-E19F-41D3-AAB1-1F413B2BF115\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:2.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DCB4B1A4-A631-4D25-B7F1-C180098E86AD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:2.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AE701510-2879-4C78-8C1D-151D5C527B4B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:2.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"00FEC5EC-EE91-4702-BD9D-4023243AA7C9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:3.00:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CB2BAB64-3A0B-4B8D-8C9A-726435218123\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:3.01:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7BAF74CC-9C39-4FB6-94B5-26865A8BBA5F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:3.02:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5F3BC841-2C51-4CBD-B666-FCB531F43AC4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:3.03:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"69C84D14-E466-4FD3-B79C-D227AD178E4C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:3.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3B5B15C1-3D3E-4875-AD4A-69798309DB3F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:3.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"64368CD7-9F8C-4D33-98B5-2F429A1F77DF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:3.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"40751F4F-46A3-4047-8532-CBEF2328D99C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:3.13:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C38566A6-B0A0-4228-A038-04817FFD543F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:3.14:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D1432D82-EA09-4C8B-A82D-BA41E14D3FE9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:3.15:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0E5C3CA8-00BF-4A35-AA5B-45D21CC2F965\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:3.16:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"90E35B41-4048-43AD-8DF0-7B4088869A88\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:3.20:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3114B51A-E651-4095-B817-0978673FDE6F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:3.21:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D6A6FC30-6AF0-4382-95B0-1672929F8150\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:3.22:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"97A2321F-017F-4D7F-A27A-22725912ABA3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:3.30:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2187D70-7ADA-401E-B03E-E1A92D9CDD59\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:3.31:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C8639E64-721A-4155-B775-CD3F775356F1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:3.32:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DA92BC83-33D0-4387-8C93-F2F0754E227A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:3.33:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F7E7B583-CB1D-43FE-A05C-4B31F64FD6A6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:3.34:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A35D9EF0-0267-4092-BC67-4C4B842B8ABF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:3.35:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5FE35F22-5B61-45A4-B8A2-67B8E792D58C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:3.36:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BC707056-63FC-4E61-A9A3-F89FE0E490E8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:4.00:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"92A7C49F-8826-47A5-BA9E-28472DFC5EFB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:4.01:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"52B3A794-43C7-4071-8E5A-EA209903165F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:4.02:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"84DBC4E0-608F-40AA-AE30-D40D72F9BED4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:4.03:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"71998344-4AC0-473F-980C-D8D0077E19A3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:4.04:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"42DA6BCE-7F17-4426-B514-3D50C764F4C0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:4.05:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"032862E6-F4CB-4E0E-93CA-0663E8536A1E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:4.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0EC43E6B-2DA9-496E-BAD2-04FF4C3A53FA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:4.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9FF31403-56FE-48D4-A93C-91B4DC89489B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:4.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CB5A240D-CA4D-4929-BA60-DBE621A4E6F9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:4.14:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6BE1A094-2760-49CA-84A8-84B19BE2BE59\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:4.20:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"04C4B45D-A0AC-42B3-99D7-91F7B8D15B69\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:4.21:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ED822CDF-C94B-4A16-BEEB-FECE51CBB744\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:4.22:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B52A1ECA-44CC-4DDE-B1AD-25AE27605317\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:4.23:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3E7D5D6F-8FDB-4AC2-A4D9-16E632AC8EAC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:4.24:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A4FEC2B4-BD68-428E-91BC-BC85F72E3BE8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:4.30:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"23EEBB47-2495-4FDB-9A55-415DA69392E8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:4.31:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D4A8E154-32CC-4665-82A0-1DE7A51B2435\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:4.32:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4B594190-DF8F-45AE-8579-BD7B4568606F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:4.33:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BD2D8712-4DF9-4A73-93A7-7719C3502E18\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:4.34:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2D9DF054-4CBF-4BA7-9A42-5627DC4B6A68\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:4.40:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B13E6533-BEB9-4082-9063-7E3CCBF4C36C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:4.41:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"879B9641-3245-4CF7-912A-FD21372F46F4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:4.42:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A91CA841-BBCA-4EF9-BC00-478A18797941\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:4.43:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EEA3F58C-3EF2-48B9-9171-7EFE72B1A3DD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:4.44:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AFB37C45-54E7-4E91-8E6D-0A3E764E1702\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:4.50:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"31CBE3C0-4918-4FA6-B1E7-6336913EF8D6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:4.51:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FC45BCE0-F190-4050-8B3B-869D0C1033AE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:4.52:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6FD0E5A4-3FCB-46C1-A709-CA15D96FA9B0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:4.53:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D3335C80-97AE-42DB-B125-0D3FA57D8317\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:4.54:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0F83560A-BDD7-456D-846C-D1DAF5C9DA64\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:4.60:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"22B9FD06-13E3-47CA-AB67-691DC3A9C330\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:4.61:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EE2A81F2-3E53-4A31-BCC6-BDC0E1B62CC8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:4.62:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2A03C071-87BF-4D5E-ABED-472ABAEFAC71\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:4.63:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D1D96C53-989C-42C8-9E71-A206B78ED55A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:4.64:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"30190EAB-7140-4E0A-B7A5-8FA8BD0749C9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:4.65:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E0BD63C5-C916-4D7D-AE81-7B9676FC0951\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:4.66:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CCD8FE2F-8D53-407A-BB83-EB7725456D71\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:4.67:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"162F5CB4-1931-4236-8519-DD63A98BCEE0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:4.68:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9EF06704-E078-42FA-89DA-7BCA169D0E5B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:4.69:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B8F2CB6E-1ED1-4E56-9532-30D2BA6A53DD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:4.70:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"452E9C94-B7FF-40A9-A7F9-FC38824F6135\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:4.71:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A8EB3709-D51F-46D1-99B8-CFB4C2275077\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:4.72:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CBDB2156-072B-4392-9DC8-266FF1B8C7A4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:4.73:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"02F8A053-4578-4C45-A193-C188E45ED010\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:exim:exim:4.74:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A5DC11D6-F67F-40A8-B8BF-2E76DD2F9091\"}]}]}],\"references\":[{\"url\":\"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=624670\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Patch\"]},{\"url\":\"http://bugs.exim.org/show_bug.cgi?id=1106\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Patch\"]},{\"url\":\"http://git.exim.org/exim.git/commit/337e3505b0e6cd4309db6bf6062b33fa56e06cf8\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Patch\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://secunia.com/advisories/51155\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.debian.org/security/2011/dsa-2232\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=702474\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Patch\"]},{\"url\":\"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=624670\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"http://bugs.exim.org/show_bug.cgi?id=1106\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"http://git.exim.org/exim.git/commit/337e3505b0e6cd4309db6bf6062b33fa56e06cf8\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/51155\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.debian.org/security/2011/dsa-2232\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=702474\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]}]}}"
}
}
CERTA-2011-AVI-280
Vulnerability from certfr_avis - Published: - Updated:
Une vulnérabilité dans Exim permet à une personne malintentionnée d'exécuter du code arbitraire à distance.
Description
Une erreur dans une chaine de format de Exim permet à une personne malintentionnée d'exécuter du code arbitraire à distance.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Exim versions 4.76 et antérieures.
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | |
|---|---|---|---|
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cp\u003eExim versions 4.76 et ant\u00e9rieures.\u003c/p\u003e",
"content": "## Description\n\nUne erreur dans une chaine de format de Exim permet \u00e0 une personne\nmalintentionn\u00e9e d\u0027ex\u00e9cuter du code arbitraire \u00e0 distance.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2011-1764",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-1764"
}
],
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 Fedora FEDORA-2011-7059 du 17 mai 2011 (exim-4.76-1.fc13) :",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060227.html"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Fedora FEDORA-2011-7047 du 17 mai 2011 (exim-4.76-1.fc14) :",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060220.html"
}
],
"reference": "CERTA-2011-AVI-280",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2011-05-06T00:00:00.000000"
},
{
"description": "ajouts des correctifs Fedora.",
"revision_date": "2011-05-19T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
}
],
"summary": "Une vuln\u00e9rabilit\u00e9 dans Exim permet \u00e0 une personne malintentionn\u00e9e\nd\u0027ex\u00e9cuter du code arbitraire \u00e0 distance.\n",
"title": "Vuln\u00e9rabilit\u00e9 dans Exim",
"vendor_advisories": [
{
"published_at": null,
"title": "Note de version Exim du 06 mai 2011",
"url": "http://lists.exim.org/lurker/message/20110506.112357.e99a8db1.en.html"
}
]
}
CERTA-2011-AVI-280
Vulnerability from certfr_avis - Published: - Updated:
Une vulnérabilité dans Exim permet à une personne malintentionnée d'exécuter du code arbitraire à distance.
Description
Une erreur dans une chaine de format de Exim permet à une personne malintentionnée d'exécuter du code arbitraire à distance.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Exim versions 4.76 et antérieures.
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | |
|---|---|---|---|
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cp\u003eExim versions 4.76 et ant\u00e9rieures.\u003c/p\u003e",
"content": "## Description\n\nUne erreur dans une chaine de format de Exim permet \u00e0 une personne\nmalintentionn\u00e9e d\u0027ex\u00e9cuter du code arbitraire \u00e0 distance.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2011-1764",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-1764"
}
],
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 Fedora FEDORA-2011-7059 du 17 mai 2011 (exim-4.76-1.fc13) :",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060227.html"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Fedora FEDORA-2011-7047 du 17 mai 2011 (exim-4.76-1.fc14) :",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060220.html"
}
],
"reference": "CERTA-2011-AVI-280",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2011-05-06T00:00:00.000000"
},
{
"description": "ajouts des correctifs Fedora.",
"revision_date": "2011-05-19T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
}
],
"summary": "Une vuln\u00e9rabilit\u00e9 dans Exim permet \u00e0 une personne malintentionn\u00e9e\nd\u0027ex\u00e9cuter du code arbitraire \u00e0 distance.\n",
"title": "Vuln\u00e9rabilit\u00e9 dans Exim",
"vendor_advisories": [
{
"published_at": null,
"title": "Note de version Exim du 06 mai 2011",
"url": "http://lists.exim.org/lurker/message/20110506.112357.e99a8db1.en.html"
}
]
}
OPENSUSE-SU-2024:10017-1
Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2024-06-15 00:00Summary
exim-4.86.2-2.2 on GA media
Severity
Moderate
Notes
Title of the patch: exim-4.86.2-2.2 on GA media
Description of the patch: These are all security issues fixed in the exim-4.86.2-2.2 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2024-10017
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:exim-4.86.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:exim-4.86.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:exim-4.86.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:exim-4.86.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximon-4.86.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximon-4.86.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximon-4.86.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximon-4.86.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:exim-4.86.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:exim-4.86.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:exim-4.86.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:exim-4.86.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximon-4.86.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximon-4.86.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximon-4.86.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximon-4.86.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
9.8 (Critical)
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:exim-4.86.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:exim-4.86.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:exim-4.86.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:exim-4.86.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximon-4.86.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximon-4.86.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximon-4.86.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximon-4.86.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
7.8 (High)
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:exim-4.86.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:exim-4.86.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:exim-4.86.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:exim-4.86.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximon-4.86.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximon-4.86.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximon-4.86.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximon-4.86.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:exim-4.86.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:exim-4.86.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:exim-4.86.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:exim-4.86.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximon-4.86.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximon-4.86.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximon-4.86.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximon-4.86.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:exim-4.86.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:exim-4.86.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:exim-4.86.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:exim-4.86.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximon-4.86.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximon-4.86.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximon-4.86.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximon-4.86.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:exim-4.86.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:exim-4.86.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:exim-4.86.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:exim-4.86.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximon-4.86.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximon-4.86.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximon-4.86.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximon-4.86.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:exim-4.86.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:exim-4.86.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:exim-4.86.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:exim-4.86.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximon-4.86.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximon-4.86.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximon-4.86.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximon-4.86.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:exim-4.86.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:exim-4.86.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:exim-4.86.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:exim-4.86.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximon-4.86.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximon-4.86.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximon-4.86.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximon-4.86.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:exim-4.86.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:exim-4.86.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:exim-4.86.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:exim-4.86.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximon-4.86.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximon-4.86.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximon-4.86.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximon-4.86.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:exim-4.86.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:exim-4.86.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:exim-4.86.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:exim-4.86.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximon-4.86.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximon-4.86.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximon-4.86.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximon-4.86.2-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
34 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "exim-4.86.2-2.2 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the exim-4.86.2-2.2 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-10017",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10017-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2010-2023 page",
"url": "https://www.suse.com/security/cve/CVE-2010-2023/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2010-2024 page",
"url": "https://www.suse.com/security/cve/CVE-2010-2024/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2010-4344 page",
"url": "https://www.suse.com/security/cve/CVE-2010-4344/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2010-4345 page",
"url": "https://www.suse.com/security/cve/CVE-2010-4345/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-0017 page",
"url": "https://www.suse.com/security/cve/CVE-2011-0017/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-1407 page",
"url": "https://www.suse.com/security/cve/CVE-2011-1407/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-1764 page",
"url": "https://www.suse.com/security/cve/CVE-2011-1764/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-5671 page",
"url": "https://www.suse.com/security/cve/CVE-2012-5671/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-2957 page",
"url": "https://www.suse.com/security/cve/CVE-2014-2957/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-2972 page",
"url": "https://www.suse.com/security/cve/CVE-2014-2972/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1531 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1531/"
}
],
"title": "exim-4.86.2-2.2 on GA media",
"tracking": {
"current_release_date": "2024-06-15T00:00:00Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:10017-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "exim-4.86.2-2.2.aarch64",
"product": {
"name": "exim-4.86.2-2.2.aarch64",
"product_id": "exim-4.86.2-2.2.aarch64"
}
},
{
"category": "product_version",
"name": "eximon-4.86.2-2.2.aarch64",
"product": {
"name": "eximon-4.86.2-2.2.aarch64",
"product_id": "eximon-4.86.2-2.2.aarch64"
}
},
{
"category": "product_version",
"name": "eximstats-html-4.86.2-2.2.aarch64",
"product": {
"name": "eximstats-html-4.86.2-2.2.aarch64",
"product_id": "eximstats-html-4.86.2-2.2.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "exim-4.86.2-2.2.ppc64le",
"product": {
"name": "exim-4.86.2-2.2.ppc64le",
"product_id": "exim-4.86.2-2.2.ppc64le"
}
},
{
"category": "product_version",
"name": "eximon-4.86.2-2.2.ppc64le",
"product": {
"name": "eximon-4.86.2-2.2.ppc64le",
"product_id": "eximon-4.86.2-2.2.ppc64le"
}
},
{
"category": "product_version",
"name": "eximstats-html-4.86.2-2.2.ppc64le",
"product": {
"name": "eximstats-html-4.86.2-2.2.ppc64le",
"product_id": "eximstats-html-4.86.2-2.2.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "exim-4.86.2-2.2.s390x",
"product": {
"name": "exim-4.86.2-2.2.s390x",
"product_id": "exim-4.86.2-2.2.s390x"
}
},
{
"category": "product_version",
"name": "eximon-4.86.2-2.2.s390x",
"product": {
"name": "eximon-4.86.2-2.2.s390x",
"product_id": "eximon-4.86.2-2.2.s390x"
}
},
{
"category": "product_version",
"name": "eximstats-html-4.86.2-2.2.s390x",
"product": {
"name": "eximstats-html-4.86.2-2.2.s390x",
"product_id": "eximstats-html-4.86.2-2.2.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "exim-4.86.2-2.2.x86_64",
"product": {
"name": "exim-4.86.2-2.2.x86_64",
"product_id": "exim-4.86.2-2.2.x86_64"
}
},
{
"category": "product_version",
"name": "eximon-4.86.2-2.2.x86_64",
"product": {
"name": "eximon-4.86.2-2.2.x86_64",
"product_id": "eximon-4.86.2-2.2.x86_64"
}
},
{
"category": "product_version",
"name": "eximstats-html-4.86.2-2.2.x86_64",
"product": {
"name": "eximstats-html-4.86.2-2.2.x86_64",
"product_id": "eximstats-html-4.86.2-2.2.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "exim-4.86.2-2.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:exim-4.86.2-2.2.aarch64"
},
"product_reference": "exim-4.86.2-2.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exim-4.86.2-2.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:exim-4.86.2-2.2.ppc64le"
},
"product_reference": "exim-4.86.2-2.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exim-4.86.2-2.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:exim-4.86.2-2.2.s390x"
},
"product_reference": "exim-4.86.2-2.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exim-4.86.2-2.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:exim-4.86.2-2.2.x86_64"
},
"product_reference": "exim-4.86.2-2.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eximon-4.86.2-2.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:eximon-4.86.2-2.2.aarch64"
},
"product_reference": "eximon-4.86.2-2.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eximon-4.86.2-2.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:eximon-4.86.2-2.2.ppc64le"
},
"product_reference": "eximon-4.86.2-2.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eximon-4.86.2-2.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:eximon-4.86.2-2.2.s390x"
},
"product_reference": "eximon-4.86.2-2.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eximon-4.86.2-2.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:eximon-4.86.2-2.2.x86_64"
},
"product_reference": "eximon-4.86.2-2.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eximstats-html-4.86.2-2.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.aarch64"
},
"product_reference": "eximstats-html-4.86.2-2.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eximstats-html-4.86.2-2.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.ppc64le"
},
"product_reference": "eximstats-html-4.86.2-2.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eximstats-html-4.86.2-2.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.s390x"
},
"product_reference": "eximstats-html-4.86.2-2.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eximstats-html-4.86.2-2.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.x86_64"
},
"product_reference": "eximstats-html-4.86.2-2.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2010-2023",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2010-2023"
}
],
"notes": [
{
"category": "general",
"text": "transports/appendfile.c in Exim before 4.72, when a world-writable sticky-bit mail directory is used, does not verify the st_nlink field of mailbox files, which allows local users to cause a denial of service or possibly gain privileges by creating a hard link to another user\u0027s file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:exim-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:exim-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:exim-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:exim-4.86.2-2.2.x86_64",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.x86_64",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2010-2023",
"url": "https://www.suse.com/security/cve/CVE-2010-2023"
},
{
"category": "external",
"summary": "SUSE Bug 612549 for CVE-2010-2023",
"url": "https://bugzilla.suse.com/612549"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:exim-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:exim-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:exim-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:exim-4.86.2-2.2.x86_64",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.x86_64",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2010-2023"
},
{
"cve": "CVE-2010-2024",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2010-2024"
}
],
"notes": [
{
"category": "general",
"text": "transports/appendfile.c in Exim before 4.72, when MBX locking is enabled, allows local users to change permissions of arbitrary files or create arbitrary files, and cause a denial of service or possibly gain privileges, via a symlink attack on a lockfile in /tmp/.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:exim-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:exim-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:exim-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:exim-4.86.2-2.2.x86_64",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.x86_64",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2010-2024",
"url": "https://www.suse.com/security/cve/CVE-2010-2024"
},
{
"category": "external",
"summary": "SUSE Bug 612549 for CVE-2010-2024",
"url": "https://bugzilla.suse.com/612549"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:exim-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:exim-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:exim-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:exim-4.86.2-2.2.x86_64",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.x86_64",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2010-2024"
},
{
"cve": "CVE-2010-4344",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2010-4344"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session that includes two MAIL commands in conjunction with a large message containing crafted headers, leading to improper rejection logging.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:exim-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:exim-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:exim-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:exim-4.86.2-2.2.x86_64",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.x86_64",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2010-4344",
"url": "https://www.suse.com/security/cve/CVE-2010-4344"
},
{
"category": "external",
"summary": "SUSE Bug 658731 for CVE-2010-4344",
"url": "https://bugzilla.suse.com/658731"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:exim-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:exim-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:exim-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:exim-4.86.2-2.2.x86_64",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.x86_64",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:exim-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:exim-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:exim-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:exim-4.86.2-2.2.x86_64",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.x86_64",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2010-4344"
},
{
"cve": "CVE-2010-4345",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2010-4345"
}
],
"notes": [
{
"category": "general",
"text": "Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands, as demonstrated by the spool_directory directive.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:exim-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:exim-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:exim-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:exim-4.86.2-2.2.x86_64",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.x86_64",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2010-4345",
"url": "https://www.suse.com/security/cve/CVE-2010-4345"
},
{
"category": "external",
"summary": "SUSE Bug 658731 for CVE-2010-4345",
"url": "https://bugzilla.suse.com/658731"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:exim-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:exim-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:exim-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:exim-4.86.2-2.2.x86_64",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.x86_64",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:exim-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:exim-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:exim-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:exim-4.86.2-2.2.x86_64",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.x86_64",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2010-4345"
},
{
"cve": "CVE-2011-0017",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-0017"
}
],
"notes": [
{
"category": "general",
"text": "The open_log function in log.c in Exim 4.72 and earlier does not check the return value from (1) setuid or (2) setgid system calls, which allows local users to append log data to arbitrary files via a symlink attack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:exim-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:exim-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:exim-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:exim-4.86.2-2.2.x86_64",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.x86_64",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-0017",
"url": "https://www.suse.com/security/cve/CVE-2011-0017"
},
{
"category": "external",
"summary": "SUSE Bug 668599 for CVE-2011-0017",
"url": "https://bugzilla.suse.com/668599"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:exim-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:exim-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:exim-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:exim-4.86.2-2.2.x86_64",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.x86_64",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-0017"
},
{
"cve": "CVE-2011-1407",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-1407"
}
],
"notes": [
{
"category": "general",
"text": "The DKIM implementation in Exim 4.7x before 4.76 permits matching for DKIM identities to apply to lookup items, instead of only strings, which allows remote attackers to execute arbitrary code or access a filesystem via a crafted identity.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:exim-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:exim-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:exim-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:exim-4.86.2-2.2.x86_64",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.x86_64",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-1407",
"url": "https://www.suse.com/security/cve/CVE-2011-1407"
},
{
"category": "external",
"summary": "SUSE Bug 694798 for CVE-2011-1407",
"url": "https://bugzilla.suse.com/694798"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:exim-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:exim-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:exim-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:exim-4.86.2-2.2.x86_64",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.x86_64",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-1407"
},
{
"cve": "CVE-2011-1764",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-1764"
}
],
"notes": [
{
"category": "general",
"text": "Format string vulnerability in the dkim_exim_verify_finish function in src/dkim.c in Exim before 4.76 might allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via format string specifiers in data used in DKIM logging, as demonstrated by an identity field containing a % (percent) character.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:exim-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:exim-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:exim-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:exim-4.86.2-2.2.x86_64",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.x86_64",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-1764",
"url": "https://www.suse.com/security/cve/CVE-2011-1764"
},
{
"category": "external",
"summary": "SUSE Bug 692227 for CVE-2011-1764",
"url": "https://bugzilla.suse.com/692227"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:exim-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:exim-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:exim-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:exim-4.86.2-2.2.x86_64",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.x86_64",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-1764"
},
{
"cve": "CVE-2012-5671",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-5671"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in the dkim_exim_query_dns_txt function in dkim.c in Exim 4.70 through 4.80, when DKIM support is enabled and acl_smtp_connect and acl_smtp_rcpt are not set to \"warn control = dkim_disable_verify,\" allows remote attackers to execute arbitrary code via an email from a malicious DNS server.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:exim-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:exim-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:exim-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:exim-4.86.2-2.2.x86_64",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.x86_64",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-5671",
"url": "https://www.suse.com/security/cve/CVE-2012-5671"
},
{
"category": "external",
"summary": "SUSE Bug 786652 for CVE-2012-5671",
"url": "https://bugzilla.suse.com/786652"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:exim-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:exim-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:exim-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:exim-4.86.2-2.2.x86_64",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.x86_64",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2012-5671"
},
{
"cve": "CVE-2014-2957",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-2957"
}
],
"notes": [
{
"category": "general",
"text": "The dmarc_process function in dmarc.c in Exim before 4.82.1, when EXPERIMENTAL_DMARC is enabled, allows remote attackers to execute arbitrary code via the From header in an email, which is passed to the expand_string function.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:exim-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:exim-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:exim-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:exim-4.86.2-2.2.x86_64",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.x86_64",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-2957",
"url": "https://www.suse.com/security/cve/CVE-2014-2957"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:exim-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:exim-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:exim-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:exim-4.86.2-2.2.x86_64",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.x86_64",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2014-2957"
},
{
"cve": "CVE-2014-2972",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-2972"
}
],
"notes": [
{
"category": "general",
"text": "expand.c in Exim before 4.83 expands mathematical comparisons twice, which allows local users to gain privileges and execute arbitrary commands via a crafted lookup value.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:exim-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:exim-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:exim-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:exim-4.86.2-2.2.x86_64",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.x86_64",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-2972",
"url": "https://www.suse.com/security/cve/CVE-2014-2972"
},
{
"category": "external",
"summary": "SUSE Bug 888520 for CVE-2014-2972",
"url": "https://bugzilla.suse.com/888520"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:exim-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:exim-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:exim-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:exim-4.86.2-2.2.x86_64",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.x86_64",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-2972"
},
{
"cve": "CVE-2016-1531",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1531"
}
],
"notes": [
{
"category": "general",
"text": "Exim before 4.86.2, when installed setuid root, allows local users to gain privileges via the perl_startup argument.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:exim-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:exim-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:exim-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:exim-4.86.2-2.2.x86_64",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.x86_64",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1531",
"url": "https://www.suse.com/security/cve/CVE-2016-1531"
},
{
"category": "external",
"summary": "SUSE Bug 968844 for CVE-2016-1531",
"url": "https://bugzilla.suse.com/968844"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:exim-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:exim-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:exim-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:exim-4.86.2-2.2.x86_64",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.x86_64",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:exim-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:exim-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:exim-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:exim-4.86.2-2.2.x86_64",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:eximon-4.86.2-2.2.x86_64",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.aarch64",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.ppc64le",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.s390x",
"openSUSE Tumbleweed:eximstats-html-4.86.2-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-1531"
}
]
}
GHSA-MHVP-9557-5GXF
Vulnerability from github – Published: 2022-05-17 04:52 – Updated: 2022-05-17 04:52
VLAI?
Details
Format string vulnerability in the dkim_exim_verify_finish function in src/dkim.c in Exim before 4.76 might allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via format string specifiers in data used in DKIM logging, as demonstrated by an identity field containing a % (percent) character.
{
"affected": [],
"aliases": [
"CVE-2011-1764"
],
"database_specific": {
"cwe_ids": [
"CWE-134"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2011-10-05T02:56:00Z",
"severity": "HIGH"
},
"details": "Format string vulnerability in the dkim_exim_verify_finish function in src/dkim.c in Exim before 4.76 might allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via format string specifiers in data used in DKIM logging, as demonstrated by an identity field containing a % (percent) character.",
"id": "GHSA-mhvp-9557-5gxf",
"modified": "2022-05-17T04:52:35Z",
"published": "2022-05-17T04:52:35Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-1764"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=702474"
},
{
"type": "WEB",
"url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=624670"
},
{
"type": "WEB",
"url": "http://bugs.exim.org/show_bug.cgi?id=1106"
},
{
"type": "WEB",
"url": "http://git.exim.org/exim.git/commit/337e3505b0e6cd4309db6bf6062b33fa56e06cf8"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/51155"
},
{
"type": "WEB",
"url": "http://www.debian.org/security/2011/dsa-2232"
}
],
"schema_version": "1.4.0",
"severity": []
}
FKIE_CVE-2011-1764
Vulnerability from fkie_nvd - Published: 2011-10-05 02:56 - Updated: 2026-04-29 01:13
Severity ?
Summary
Format string vulnerability in the dkim_exim_verify_finish function in src/dkim.c in Exim before 4.76 might allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via format string specifiers in data used in DKIM logging, as demonstrated by an identity field containing a % (percent) character.
References
Impacted products
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:exim:exim:*:*:*:*:*:*:*:*",
"matchCriteriaId": "7C36CD99-E19F-41D3-AAB1-1F413B2BF115",
"versionEndIncluding": "4.75",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:2.10:*:*:*:*:*:*:*",
"matchCriteriaId": "DCB4B1A4-A631-4D25-B7F1-C180098E86AD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:2.11:*:*:*:*:*:*:*",
"matchCriteriaId": "AE701510-2879-4C78-8C1D-151D5C527B4B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:2.12:*:*:*:*:*:*:*",
"matchCriteriaId": "00FEC5EC-EE91-4702-BD9D-4023243AA7C9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:3.00:*:*:*:*:*:*:*",
"matchCriteriaId": "CB2BAB64-3A0B-4B8D-8C9A-726435218123",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:3.01:*:*:*:*:*:*:*",
"matchCriteriaId": "7BAF74CC-9C39-4FB6-94B5-26865A8BBA5F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:3.02:*:*:*:*:*:*:*",
"matchCriteriaId": "5F3BC841-2C51-4CBD-B666-FCB531F43AC4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:3.03:*:*:*:*:*:*:*",
"matchCriteriaId": "69C84D14-E466-4FD3-B79C-D227AD178E4C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:3.10:*:*:*:*:*:*:*",
"matchCriteriaId": "3B5B15C1-3D3E-4875-AD4A-69798309DB3F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:3.11:*:*:*:*:*:*:*",
"matchCriteriaId": "64368CD7-9F8C-4D33-98B5-2F429A1F77DF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:3.12:*:*:*:*:*:*:*",
"matchCriteriaId": "40751F4F-46A3-4047-8532-CBEF2328D99C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:3.13:*:*:*:*:*:*:*",
"matchCriteriaId": "C38566A6-B0A0-4228-A038-04817FFD543F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:3.14:*:*:*:*:*:*:*",
"matchCriteriaId": "D1432D82-EA09-4C8B-A82D-BA41E14D3FE9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:3.15:*:*:*:*:*:*:*",
"matchCriteriaId": "0E5C3CA8-00BF-4A35-AA5B-45D21CC2F965",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:3.16:*:*:*:*:*:*:*",
"matchCriteriaId": "90E35B41-4048-43AD-8DF0-7B4088869A88",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:3.20:*:*:*:*:*:*:*",
"matchCriteriaId": "3114B51A-E651-4095-B817-0978673FDE6F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:3.21:*:*:*:*:*:*:*",
"matchCriteriaId": "D6A6FC30-6AF0-4382-95B0-1672929F8150",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:3.22:*:*:*:*:*:*:*",
"matchCriteriaId": "97A2321F-017F-4D7F-A27A-22725912ABA3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:3.30:*:*:*:*:*:*:*",
"matchCriteriaId": "A2187D70-7ADA-401E-B03E-E1A92D9CDD59",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:3.31:*:*:*:*:*:*:*",
"matchCriteriaId": "C8639E64-721A-4155-B775-CD3F775356F1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:3.32:*:*:*:*:*:*:*",
"matchCriteriaId": "DA92BC83-33D0-4387-8C93-F2F0754E227A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:3.33:*:*:*:*:*:*:*",
"matchCriteriaId": "F7E7B583-CB1D-43FE-A05C-4B31F64FD6A6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:3.34:*:*:*:*:*:*:*",
"matchCriteriaId": "A35D9EF0-0267-4092-BC67-4C4B842B8ABF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:3.35:*:*:*:*:*:*:*",
"matchCriteriaId": "5FE35F22-5B61-45A4-B8A2-67B8E792D58C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:3.36:*:*:*:*:*:*:*",
"matchCriteriaId": "BC707056-63FC-4E61-A9A3-F89FE0E490E8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:4.00:*:*:*:*:*:*:*",
"matchCriteriaId": "92A7C49F-8826-47A5-BA9E-28472DFC5EFB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:4.01:*:*:*:*:*:*:*",
"matchCriteriaId": "52B3A794-43C7-4071-8E5A-EA209903165F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:4.02:*:*:*:*:*:*:*",
"matchCriteriaId": "84DBC4E0-608F-40AA-AE30-D40D72F9BED4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:4.03:*:*:*:*:*:*:*",
"matchCriteriaId": "71998344-4AC0-473F-980C-D8D0077E19A3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:4.04:*:*:*:*:*:*:*",
"matchCriteriaId": "42DA6BCE-7F17-4426-B514-3D50C764F4C0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:4.05:*:*:*:*:*:*:*",
"matchCriteriaId": "032862E6-F4CB-4E0E-93CA-0663E8536A1E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:4.10:*:*:*:*:*:*:*",
"matchCriteriaId": "0EC43E6B-2DA9-496E-BAD2-04FF4C3A53FA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:4.11:*:*:*:*:*:*:*",
"matchCriteriaId": "9FF31403-56FE-48D4-A93C-91B4DC89489B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:4.12:*:*:*:*:*:*:*",
"matchCriteriaId": "CB5A240D-CA4D-4929-BA60-DBE621A4E6F9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:4.14:*:*:*:*:*:*:*",
"matchCriteriaId": "6BE1A094-2760-49CA-84A8-84B19BE2BE59",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:4.20:*:*:*:*:*:*:*",
"matchCriteriaId": "04C4B45D-A0AC-42B3-99D7-91F7B8D15B69",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:4.21:*:*:*:*:*:*:*",
"matchCriteriaId": "ED822CDF-C94B-4A16-BEEB-FECE51CBB744",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:4.22:*:*:*:*:*:*:*",
"matchCriteriaId": "B52A1ECA-44CC-4DDE-B1AD-25AE27605317",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:4.23:*:*:*:*:*:*:*",
"matchCriteriaId": "3E7D5D6F-8FDB-4AC2-A4D9-16E632AC8EAC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:4.24:*:*:*:*:*:*:*",
"matchCriteriaId": "A4FEC2B4-BD68-428E-91BC-BC85F72E3BE8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:4.30:*:*:*:*:*:*:*",
"matchCriteriaId": "23EEBB47-2495-4FDB-9A55-415DA69392E8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:4.31:*:*:*:*:*:*:*",
"matchCriteriaId": "D4A8E154-32CC-4665-82A0-1DE7A51B2435",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:4.32:*:*:*:*:*:*:*",
"matchCriteriaId": "4B594190-DF8F-45AE-8579-BD7B4568606F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:4.33:*:*:*:*:*:*:*",
"matchCriteriaId": "BD2D8712-4DF9-4A73-93A7-7719C3502E18",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:4.34:*:*:*:*:*:*:*",
"matchCriteriaId": "2D9DF054-4CBF-4BA7-9A42-5627DC4B6A68",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:4.40:*:*:*:*:*:*:*",
"matchCriteriaId": "B13E6533-BEB9-4082-9063-7E3CCBF4C36C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:4.41:*:*:*:*:*:*:*",
"matchCriteriaId": "879B9641-3245-4CF7-912A-FD21372F46F4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:4.42:*:*:*:*:*:*:*",
"matchCriteriaId": "A91CA841-BBCA-4EF9-BC00-478A18797941",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:4.43:*:*:*:*:*:*:*",
"matchCriteriaId": "EEA3F58C-3EF2-48B9-9171-7EFE72B1A3DD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:4.44:*:*:*:*:*:*:*",
"matchCriteriaId": "AFB37C45-54E7-4E91-8E6D-0A3E764E1702",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:4.50:*:*:*:*:*:*:*",
"matchCriteriaId": "31CBE3C0-4918-4FA6-B1E7-6336913EF8D6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:4.51:*:*:*:*:*:*:*",
"matchCriteriaId": "FC45BCE0-F190-4050-8B3B-869D0C1033AE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:4.52:*:*:*:*:*:*:*",
"matchCriteriaId": "6FD0E5A4-3FCB-46C1-A709-CA15D96FA9B0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:4.53:*:*:*:*:*:*:*",
"matchCriteriaId": "D3335C80-97AE-42DB-B125-0D3FA57D8317",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:4.54:*:*:*:*:*:*:*",
"matchCriteriaId": "0F83560A-BDD7-456D-846C-D1DAF5C9DA64",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:4.60:*:*:*:*:*:*:*",
"matchCriteriaId": "22B9FD06-13E3-47CA-AB67-691DC3A9C330",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:4.61:*:*:*:*:*:*:*",
"matchCriteriaId": "EE2A81F2-3E53-4A31-BCC6-BDC0E1B62CC8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:4.62:*:*:*:*:*:*:*",
"matchCriteriaId": "2A03C071-87BF-4D5E-ABED-472ABAEFAC71",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:4.63:*:*:*:*:*:*:*",
"matchCriteriaId": "D1D96C53-989C-42C8-9E71-A206B78ED55A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:4.64:*:*:*:*:*:*:*",
"matchCriteriaId": "30190EAB-7140-4E0A-B7A5-8FA8BD0749C9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:4.65:*:*:*:*:*:*:*",
"matchCriteriaId": "E0BD63C5-C916-4D7D-AE81-7B9676FC0951",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:4.66:*:*:*:*:*:*:*",
"matchCriteriaId": "CCD8FE2F-8D53-407A-BB83-EB7725456D71",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:4.67:*:*:*:*:*:*:*",
"matchCriteriaId": "162F5CB4-1931-4236-8519-DD63A98BCEE0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:4.68:*:*:*:*:*:*:*",
"matchCriteriaId": "9EF06704-E078-42FA-89DA-7BCA169D0E5B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:4.69:*:*:*:*:*:*:*",
"matchCriteriaId": "B8F2CB6E-1ED1-4E56-9532-30D2BA6A53DD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:4.70:*:*:*:*:*:*:*",
"matchCriteriaId": "452E9C94-B7FF-40A9-A7F9-FC38824F6135",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:4.71:*:*:*:*:*:*:*",
"matchCriteriaId": "A8EB3709-D51F-46D1-99B8-CFB4C2275077",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:4.72:*:*:*:*:*:*:*",
"matchCriteriaId": "CBDB2156-072B-4392-9DC8-266FF1B8C7A4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:4.73:*:*:*:*:*:*:*",
"matchCriteriaId": "02F8A053-4578-4C45-A193-C188E45ED010",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:exim:exim:4.74:*:*:*:*:*:*:*",
"matchCriteriaId": "A5DC11D6-F67F-40A8-B8BF-2E76DD2F9091",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Format string vulnerability in the dkim_exim_verify_finish function in src/dkim.c in Exim before 4.76 might allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via format string specifiers in data used in DKIM logging, as demonstrated by an identity field containing a % (percent) character."
},
{
"lang": "es",
"value": "Vulnerabilidad de formato de cadena en la funci\u00f3n dkim_exim_verify_finish de src/dkim.c de Exim en versiones anteriores a 4.76. Puede permitir a atacantes remotos ejecutar c\u00f3digo arbitrario o provocar una denegaci\u00f3n de servicio (ca\u00edda del demonio) a trav\u00e9s de especificadores de formato de cadena en datos usados en el logging DKIM, tal como se ha demostrado en un campo identity que contenga un car\u00e1cter % (tanto por ciento)."
}
],
"id": "CVE-2011-1764",
"lastModified": "2026-04-29T01:13:23.040",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2011-10-05T02:56:24.707",
"references": [
{
"source": "secalert@redhat.com",
"tags": [
"Patch"
],
"url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=624670"
},
{
"source": "secalert@redhat.com",
"tags": [
"Patch"
],
"url": "http://bugs.exim.org/show_bug.cgi?id=1106"
},
{
"source": "secalert@redhat.com",
"tags": [
"Patch"
],
"url": "http://git.exim.org/exim.git/commit/337e3505b0e6cd4309db6bf6062b33fa56e06cf8"
},
{
"source": "secalert@redhat.com",
"url": "http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html"
},
{
"source": "secalert@redhat.com",
"url": "http://secunia.com/advisories/51155"
},
{
"source": "secalert@redhat.com",
"url": "http://www.debian.org/security/2011/dsa-2232"
},
{
"source": "secalert@redhat.com",
"tags": [
"Patch"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=702474"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
],
"url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=624670"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
],
"url": "http://bugs.exim.org/show_bug.cgi?id=1106"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
],
"url": "http://git.exim.org/exim.git/commit/337e3505b0e6cd4309db6bf6062b33fa56e06cf8"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://secunia.com/advisories/51155"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.debian.org/security/2011/dsa-2232"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=702474"
}
],
"sourceIdentifier": "secalert@redhat.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-134"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
GSD-2011-1764
Vulnerability from gsd - Updated: 2023-12-13 01:19Details
Format string vulnerability in the dkim_exim_verify_finish function in src/dkim.c in Exim before 4.76 might allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via format string specifiers in data used in DKIM logging, as demonstrated by an identity field containing a % (percent) character.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2011-1764",
"description": "Format string vulnerability in the dkim_exim_verify_finish function in src/dkim.c in Exim before 4.76 might allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via format string specifiers in data used in DKIM logging, as demonstrated by an identity field containing a % (percent) character.",
"id": "GSD-2011-1764",
"references": [
"https://www.suse.com/security/cve/CVE-2011-1764.html",
"https://www.debian.org/security/2011/dsa-2232"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2011-1764"
],
"details": "Format string vulnerability in the dkim_exim_verify_finish function in src/dkim.c in Exim before 4.76 might allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via format string specifiers in data used in DKIM logging, as demonstrated by an identity field containing a % (percent) character.",
"id": "GSD-2011-1764",
"modified": "2023-12-13T01:19:07.756798Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2011-1764",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Format string vulnerability in the dkim_exim_verify_finish function in src/dkim.c in Exim before 4.76 might allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via format string specifiers in data used in DKIM logging, as demonstrated by an identity field containing a % (percent) character."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "51155",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/51155"
},
{
"name": "SUSE-SR:2011:009",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html"
},
{
"name": "DSA-2232",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2011/dsa-2232"
},
{
"name": "http://git.exim.org/exim.git/commit/337e3505b0e6cd4309db6bf6062b33fa56e06cf8",
"refsource": "CONFIRM",
"url": "http://git.exim.org/exim.git/commit/337e3505b0e6cd4309db6bf6062b33fa56e06cf8"
},
{
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=702474",
"refsource": "CONFIRM",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=702474"
},
{
"name": "http://bugs.exim.org/show_bug.cgi?id=1106",
"refsource": "CONFIRM",
"url": "http://bugs.exim.org/show_bug.cgi?id=1106"
},
{
"name": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=624670",
"refsource": "CONFIRM",
"url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=624670"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:exim:exim:4.50:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:4.44:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:4.63:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:4.62:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:4.61:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:4.21:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:4.22:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:4.41:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:4.40:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:4.03:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:4.02:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:3.32:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:3.31:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:3.14:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:3.13:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:2.12:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:2.11:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:4.74:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "4.75",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:4.51:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:4.30:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:4.64:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:4.23:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:4.24:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:4.68:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:4.10:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:4.14:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:4.05:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:4.04:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:3.34:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:3.33:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:3.16:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:3.15:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:3.01:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:3.00:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:4.72:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:4.73:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:4.43:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:4.34:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:4.60:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:4.54:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:4.42:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:4.65:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:4.32:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:4.20:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:4.01:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:4.00:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:3.30:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:3.22:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:3.12:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:3.11:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:2.10:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:4.69:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:4.33:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:4.31:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:4.53:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:4.52:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:4.66:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:4.67:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:4.11:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:4.12:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:3.36:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:3.35:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:3.21:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:3.20:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:3.10:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:3.03:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:3.02:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:4.70:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:exim:exim:4.71:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2011-1764"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "Format string vulnerability in the dkim_exim_verify_finish function in src/dkim.c in Exim before 4.76 might allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via format string specifiers in data used in DKIM logging, as demonstrated by an identity field containing a % (percent) character."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-134"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=702474",
"refsource": "CONFIRM",
"tags": [
"Patch"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=702474"
},
{
"name": "http://git.exim.org/exim.git/commit/337e3505b0e6cd4309db6bf6062b33fa56e06cf8",
"refsource": "CONFIRM",
"tags": [
"Patch"
],
"url": "http://git.exim.org/exim.git/commit/337e3505b0e6cd4309db6bf6062b33fa56e06cf8"
},
{
"name": "DSA-2232",
"refsource": "DEBIAN",
"tags": [],
"url": "http://www.debian.org/security/2011/dsa-2232"
},
{
"name": "http://bugs.exim.org/show_bug.cgi?id=1106",
"refsource": "CONFIRM",
"tags": [
"Patch"
],
"url": "http://bugs.exim.org/show_bug.cgi?id=1106"
},
{
"name": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=624670",
"refsource": "CONFIRM",
"tags": [
"Patch"
],
"url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=624670"
},
{
"name": "51155",
"refsource": "SECUNIA",
"tags": [],
"url": "http://secunia.com/advisories/51155"
},
{
"name": "SUSE-SR:2011:009",
"refsource": "SUSE",
"tags": [],
"url": "http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html"
}
]
}
},
"impact": {
"baseMetricV2": {
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "HIGH",
"userInteractionRequired": false
}
},
"lastModifiedDate": "2014-02-21T04:42Z",
"publishedDate": "2011-10-05T02:56Z"
}
}
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…