Vulnerability-Lookup

USN-6411-1 (UBUNTU-CVE-2023-42114)

Vulnerability from osv_ubuntu – Published: 2023-10-04 13:41 – Updated: 2026-06-29 10:53 – Source website

Summary

exim4 vulnerabilities

Details

It was discovered that Exim incorrectly handled certain challenge requests. A remote attacker could possibly use this issue to perform out-of-bounds reads, resulting in information leakage. (CVE-2023-42114)

It was discovered that Exim incorrectly handled validation of user-supplied data. A remote attacker could possibly use this issue to perform out-of-bounds writes, resulting in arbitrary code execution. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 23.04. (CVE-2023-42115)

It was discovered that Exim incorrectly handled certain challenge requests. A remote attacker could possibly use this issue to perform out-of-bounds writes, resulting in arbitrary code execution. (CVE-2023-42116)

References

URL

Type

	https://ubuntu.com/security/notices/USN-6411-1	ADVISORY
	https://ubuntu.com/security/CVE-2023-42114	REPORT
	https://ubuntu.com/security/CVE-2023-42115	REPORT
	https://ubuntu.com/security/CVE-2023-42116	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2023-42114",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-42116",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:Pro:14.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "exim4",
            "binary_version": "4.82-3ubuntu2.4+esm6"
          },
          {
            "binary_name": "exim4-base",
            "binary_version": "4.82-3ubuntu2.4+esm6"
          },
          {
            "binary_name": "exim4-config",
            "binary_version": "4.82-3ubuntu2.4+esm6"
          },
          {
            "binary_name": "exim4-daemon-heavy",
            "binary_version": "4.82-3ubuntu2.4+esm6"
          },
          {
            "binary_name": "exim4-daemon-light",
            "binary_version": "4.82-3ubuntu2.4+esm6"
          },
          {
            "binary_name": "eximon4",
            "binary_version": "4.82-3ubuntu2.4+esm6"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:14.04:LTS",
        "name": "exim4",
        "purl": "pkg:deb/ubuntu/exim4@4.82-3ubuntu2.4+esm6?arch=source\u0026distro=trusty/esm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.82-3ubuntu2.4+esm6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.80-7ubuntu3",
        "4.80-7ubuntu4",
        "4.80-9ubuntu1",
        "4.80-9ubuntu2",
        "4.82-3ubuntu1",
        "4.82-3ubuntu2",
        "4.82-3ubuntu2.1",
        "4.82-3ubuntu2.2",
        "4.82-3ubuntu2.3",
        "4.82-3ubuntu2.4",
        "4.82-3ubuntu2.4+esm1",
        "4.82-3ubuntu2.4+esm2",
        "4.82-3ubuntu2.4+esm3",
        "4.82-3ubuntu2.4+esm4"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2023-42114",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-42116",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:Pro:16.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "exim4",
            "binary_version": "4.86.2-2ubuntu2.6+esm4"
          },
          {
            "binary_name": "exim4-base",
            "binary_version": "4.86.2-2ubuntu2.6+esm4"
          },
          {
            "binary_name": "exim4-config",
            "binary_version": "4.86.2-2ubuntu2.6+esm4"
          },
          {
            "binary_name": "exim4-daemon-heavy",
            "binary_version": "4.86.2-2ubuntu2.6+esm4"
          },
          {
            "binary_name": "exim4-daemon-light",
            "binary_version": "4.86.2-2ubuntu2.6+esm4"
          },
          {
            "binary_name": "eximon4",
            "binary_version": "4.86.2-2ubuntu2.6+esm4"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "exim4",
        "purl": "pkg:deb/ubuntu/exim4@4.86.2-2ubuntu2.6+esm4?arch=source\u0026distro=esm-infra/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.86.2-2ubuntu2.6+esm4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.86-3ubuntu1",
        "4.86-7ubuntu1",
        "4.86-7ubuntu2",
        "4.86-7ubuntu3",
        "4.86.2-2ubuntu1",
        "4.86.2-2ubuntu2",
        "4.86.2-2ubuntu2.1",
        "4.86.2-2ubuntu2.2",
        "4.86.2-2ubuntu2.3",
        "4.86.2-2ubuntu2.4",
        "4.86.2-2ubuntu2.5",
        "4.86.2-2ubuntu2.6",
        "4.86.2-2ubuntu2.6+esm1",
        "4.86.2-2ubuntu2.6+esm2"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2023-42114",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-42116",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:Pro:18.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "exim4",
            "binary_version": "4.90.1-1ubuntu1.10+esm1"
          },
          {
            "binary_name": "exim4-base",
            "binary_version": "4.90.1-1ubuntu1.10+esm1"
          },
          {
            "binary_name": "exim4-config",
            "binary_version": "4.90.1-1ubuntu1.10+esm1"
          },
          {
            "binary_name": "exim4-daemon-heavy",
            "binary_version": "4.90.1-1ubuntu1.10+esm1"
          },
          {
            "binary_name": "exim4-daemon-light",
            "binary_version": "4.90.1-1ubuntu1.10+esm1"
          },
          {
            "binary_name": "eximon4",
            "binary_version": "4.90.1-1ubuntu1.10+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:18.04:LTS",
        "name": "exim4",
        "purl": "pkg:deb/ubuntu/exim4@4.90.1-1ubuntu1.10+esm1?arch=source\u0026distro=esm-infra/bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.90.1-1ubuntu1.10+esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.89-5ubuntu1",
        "4.89-9ubuntu1",
        "4.89-9ubuntu2",
        "4.89-9ubuntu3",
        "4.89-9ubuntu4",
        "4.90.1-1ubuntu1",
        "4.90.1-1ubuntu1.1",
        "4.90.1-1ubuntu1.2",
        "4.90.1-1ubuntu1.3",
        "4.90.1-1ubuntu1.4",
        "4.90.1-1ubuntu1.5",
        "4.90.1-1ubuntu1.8",
        "4.90.1-1ubuntu1.9",
        "4.90.1-1ubuntu1.10"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2023-42114",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-42115",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-42116",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:20.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "exim4",
            "binary_version": "4.93-13ubuntu1.8"
          },
          {
            "binary_name": "exim4-base",
            "binary_version": "4.93-13ubuntu1.8"
          },
          {
            "binary_name": "exim4-config",
            "binary_version": "4.93-13ubuntu1.8"
          },
          {
            "binary_name": "exim4-daemon-heavy",
            "binary_version": "4.93-13ubuntu1.8"
          },
          {
            "binary_name": "exim4-daemon-light",
            "binary_version": "4.93-13ubuntu1.8"
          },
          {
            "binary_name": "eximon4",
            "binary_version": "4.93-13ubuntu1.8"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "exim4",
        "purl": "pkg:deb/ubuntu/exim4@4.93-13ubuntu1.8?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.93-13ubuntu1.8"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.92.1-1ubuntu3",
        "4.92.1-1ubuntu4",
        "4.93~RC2-1ubuntu1",
        "4.93-9ubuntu1",
        "4.93-11ubuntu1",
        "4.93-12ubuntu1",
        "4.93-13ubuntu1",
        "4.93-13ubuntu1.1",
        "4.93-13ubuntu1.5",
        "4.93-13ubuntu1.6",
        "4.93-13ubuntu1.7"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2023-42114",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-42115",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-42116",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:22.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "exim4",
            "binary_version": "4.95-4ubuntu2.3"
          },
          {
            "binary_name": "exim4-base",
            "binary_version": "4.95-4ubuntu2.3"
          },
          {
            "binary_name": "exim4-config",
            "binary_version": "4.95-4ubuntu2.3"
          },
          {
            "binary_name": "exim4-daemon-heavy",
            "binary_version": "4.95-4ubuntu2.3"
          },
          {
            "binary_name": "exim4-daemon-light",
            "binary_version": "4.95-4ubuntu2.3"
          },
          {
            "binary_name": "eximon4",
            "binary_version": "4.95-4ubuntu2.3"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "exim4",
        "purl": "pkg:deb/ubuntu/exim4@4.95-4ubuntu2.3?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.95-4ubuntu2.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.94.2-7ubuntu2",
        "4.95-2ubuntu2",
        "4.95-4ubuntu1",
        "4.95-4ubuntu2",
        "4.95-4ubuntu2.1",
        "4.95-4ubuntu2.2"
      ]
    }
  ],
  "aliases": [],
  "details": "It was discovered that Exim incorrectly handled certain challenge requests.\nA remote attacker could possibly use this issue to perform out-of-bounds\nreads, resulting in information leakage. (CVE-2023-42114)\n\nIt was discovered that Exim incorrectly handled validation of user-supplied\ndata. A remote attacker could possibly use this issue to perform\nout-of-bounds writes, resulting in arbitrary code execution. This issue\nonly affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 23.04.\n(CVE-2023-42115)\n\nIt was discovered that Exim incorrectly handled certain challenge requests.\nA remote attacker could possibly use this issue to perform out-of-bounds\nwrites, resulting in arbitrary code execution. (CVE-2023-42116)\n",
  "id": "USN-6411-1",
  "modified": "2026-06-29T10:53:04Z",
  "published": "2023-10-04T13:41:19Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-6411-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2023-42114"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2023-42115"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2023-42116"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "exim4 vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2023-42114",
    "UBUNTU-CVE-2023-42115",
    "UBUNTU-CVE-2023-42116"
  ]
}

UBUNTU-CVE-2023-42114 (CVE-2023-42114)

Vulnerability from osv_ubuntu – Published: 2023-09-28 00:00 – Updated: 2026-04-22 07:45 – Source website

Details

Exim NTLM Challenge Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Exim. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NTLM challenge requests. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated data structure. An attacker can leverage this vulnerability to disclose information in the context of the service account. . Was ZDI-CAN-17433.

Severity

3.7 (Low)


                    
                      CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

5.3 (Medium)


                    
                      CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2023-42114	REPORT
	https://www.zerodayinitiative.com/advisories/ZDI-…	REPORT
	https://www.openwall.com/lists/oss-security/2023/…	REPORT
	https://ubuntu.com/security/notices/USN-6411-1	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2023-42114	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "exim4",
            "binary_version": "4.82-3ubuntu2.4+esm6"
          },
          {
            "binary_name": "exim4-base",
            "binary_version": "4.82-3ubuntu2.4+esm6"
          },
          {
            "binary_name": "exim4-config",
            "binary_version": "4.82-3ubuntu2.4+esm6"
          },
          {
            "binary_name": "exim4-daemon-heavy",
            "binary_version": "4.82-3ubuntu2.4+esm6"
          },
          {
            "binary_name": "exim4-daemon-light",
            "binary_version": "4.82-3ubuntu2.4+esm6"
          },
          {
            "binary_name": "eximon4",
            "binary_version": "4.82-3ubuntu2.4+esm6"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:14.04:LTS",
        "name": "exim4",
        "purl": "pkg:deb/ubuntu/exim4@4.82-3ubuntu2.4+esm6?arch=source\u0026distro=trusty/esm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.82-3ubuntu2.4+esm6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.80-7ubuntu3",
        "4.80-7ubuntu4",
        "4.80-9ubuntu1",
        "4.80-9ubuntu2",
        "4.82-3ubuntu1",
        "4.82-3ubuntu2",
        "4.82-3ubuntu2.1",
        "4.82-3ubuntu2.2",
        "4.82-3ubuntu2.3",
        "4.82-3ubuntu2.4",
        "4.82-3ubuntu2.4+esm1",
        "4.82-3ubuntu2.4+esm2",
        "4.82-3ubuntu2.4+esm3",
        "4.82-3ubuntu2.4+esm4"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "exim4",
            "binary_version": "4.86.2-2ubuntu2.6+esm4"
          },
          {
            "binary_name": "exim4-base",
            "binary_version": "4.86.2-2ubuntu2.6+esm4"
          },
          {
            "binary_name": "exim4-config",
            "binary_version": "4.86.2-2ubuntu2.6+esm4"
          },
          {
            "binary_name": "exim4-daemon-heavy",
            "binary_version": "4.86.2-2ubuntu2.6+esm4"
          },
          {
            "binary_name": "exim4-daemon-light",
            "binary_version": "4.86.2-2ubuntu2.6+esm4"
          },
          {
            "binary_name": "eximon4",
            "binary_version": "4.86.2-2ubuntu2.6+esm4"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "exim4",
        "purl": "pkg:deb/ubuntu/exim4@4.86.2-2ubuntu2.6+esm4?arch=source\u0026distro=esm-infra/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.86.2-2ubuntu2.6+esm4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.86-3ubuntu1",
        "4.86-7ubuntu1",
        "4.86-7ubuntu2",
        "4.86-7ubuntu3",
        "4.86.2-2ubuntu1",
        "4.86.2-2ubuntu2",
        "4.86.2-2ubuntu2.1",
        "4.86.2-2ubuntu2.2",
        "4.86.2-2ubuntu2.3",
        "4.86.2-2ubuntu2.4",
        "4.86.2-2ubuntu2.5",
        "4.86.2-2ubuntu2.6",
        "4.86.2-2ubuntu2.6+esm1",
        "4.86.2-2ubuntu2.6+esm2"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "exim4",
            "binary_version": "4.90.1-1ubuntu1.10+esm1"
          },
          {
            "binary_name": "exim4-base",
            "binary_version": "4.90.1-1ubuntu1.10+esm1"
          },
          {
            "binary_name": "exim4-config",
            "binary_version": "4.90.1-1ubuntu1.10+esm1"
          },
          {
            "binary_name": "exim4-daemon-heavy",
            "binary_version": "4.90.1-1ubuntu1.10+esm1"
          },
          {
            "binary_name": "exim4-daemon-light",
            "binary_version": "4.90.1-1ubuntu1.10+esm1"
          },
          {
            "binary_name": "eximon4",
            "binary_version": "4.90.1-1ubuntu1.10+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:18.04:LTS",
        "name": "exim4",
        "purl": "pkg:deb/ubuntu/exim4@4.90.1-1ubuntu1.10+esm1?arch=source\u0026distro=esm-infra/bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.90.1-1ubuntu1.10+esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.89-5ubuntu1",
        "4.89-9ubuntu1",
        "4.89-9ubuntu2",
        "4.89-9ubuntu3",
        "4.89-9ubuntu4",
        "4.90.1-1ubuntu1",
        "4.90.1-1ubuntu1.1",
        "4.90.1-1ubuntu1.2",
        "4.90.1-1ubuntu1.3",
        "4.90.1-1ubuntu1.4",
        "4.90.1-1ubuntu1.5",
        "4.90.1-1ubuntu1.8",
        "4.90.1-1ubuntu1.9",
        "4.90.1-1ubuntu1.10"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "exim4",
            "binary_version": "4.93-13ubuntu1.8"
          },
          {
            "binary_name": "exim4-base",
            "binary_version": "4.93-13ubuntu1.8"
          },
          {
            "binary_name": "exim4-config",
            "binary_version": "4.93-13ubuntu1.8"
          },
          {
            "binary_name": "exim4-daemon-heavy",
            "binary_version": "4.93-13ubuntu1.8"
          },
          {
            "binary_name": "exim4-daemon-light",
            "binary_version": "4.93-13ubuntu1.8"
          },
          {
            "binary_name": "eximon4",
            "binary_version": "4.93-13ubuntu1.8"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "exim4",
        "purl": "pkg:deb/ubuntu/exim4@4.93-13ubuntu1.8?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.93-13ubuntu1.8"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.92.1-1ubuntu3",
        "4.92.1-1ubuntu4",
        "4.93~RC2-1ubuntu1",
        "4.93-9ubuntu1",
        "4.93-11ubuntu1",
        "4.93-12ubuntu1",
        "4.93-13ubuntu1",
        "4.93-13ubuntu1.1",
        "4.93-13ubuntu1.5",
        "4.93-13ubuntu1.6",
        "4.93-13ubuntu1.7"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "exim4",
            "binary_version": "4.95-4ubuntu2.3"
          },
          {
            "binary_name": "exim4-base",
            "binary_version": "4.95-4ubuntu2.3"
          },
          {
            "binary_name": "exim4-config",
            "binary_version": "4.95-4ubuntu2.3"
          },
          {
            "binary_name": "exim4-daemon-heavy",
            "binary_version": "4.95-4ubuntu2.3"
          },
          {
            "binary_name": "exim4-daemon-light",
            "binary_version": "4.95-4ubuntu2.3"
          },
          {
            "binary_name": "eximon4",
            "binary_version": "4.95-4ubuntu2.3"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "exim4",
        "purl": "pkg:deb/ubuntu/exim4@4.95-4ubuntu2.3?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.95-4ubuntu2.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.94.2-7ubuntu2",
        "4.95-2ubuntu2",
        "4.95-4ubuntu1",
        "4.95-4ubuntu2",
        "4.95-4ubuntu2.1",
        "4.95-4ubuntu2.2"
      ]
    }
  ],
  "aliases": [],
  "details": "Exim NTLM Challenge Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Exim. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NTLM challenge requests. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated data structure. An attacker can leverage this vulnerability to disclose information in the context of the service account. . Was ZDI-CAN-17433.",
  "id": "UBUNTU-CVE-2023-42114",
  "modified": "2026-04-22T07:45:26Z",
  "published": "2023-09-28T00:00:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2023-42114"
    },
    {
      "type": "REPORT",
      "url": "https://www.zerodayinitiative.com/advisories/ZDI-23-1468/"
    },
    {
      "type": "REPORT",
      "url": "https://www.openwall.com/lists/oss-security/2023/10/02/3"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-6411-1"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-42114"
    }
  ],
  "related": [
    "USN-6411-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
      "type": "CVSS_V3"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2023-42114"
  ]
}

UBUNTU-CVE-2023-42115 (CVE-2023-42115)

Vulnerability from osv_ubuntu – Published: 2023-09-28 00:00 – Updated: 2026-04-22 07:45 – Source website

Details

Exim AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Exim. Authentication is not required to exploit this vulnerability. The specific flaw exists within the smtp service, which listens on TCP port 25 by default. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of a buffer. An attacker can leverage this vulnerability to execute code in the context of the service account. . Was ZDI-CAN-17434.

Severity

9.8 (Critical)


                    
                      CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2023-42115	REPORT
	https://www.zerodayinitiative.com/advisories/ZDI-…	REPORT
	https://www.openwall.com/lists/oss-security/2023/…	REPORT
	https://ubuntu.com/security/notices/USN-6411-1	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2023-42115	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "exim4",
            "binary_version": "4.93-13ubuntu1.8"
          },
          {
            "binary_name": "exim4-base",
            "binary_version": "4.93-13ubuntu1.8"
          },
          {
            "binary_name": "exim4-config",
            "binary_version": "4.93-13ubuntu1.8"
          },
          {
            "binary_name": "exim4-daemon-heavy",
            "binary_version": "4.93-13ubuntu1.8"
          },
          {
            "binary_name": "exim4-daemon-light",
            "binary_version": "4.93-13ubuntu1.8"
          },
          {
            "binary_name": "eximon4",
            "binary_version": "4.93-13ubuntu1.8"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "exim4",
        "purl": "pkg:deb/ubuntu/exim4@4.93-13ubuntu1.8?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.93-13ubuntu1.8"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.92.1-1ubuntu3",
        "4.92.1-1ubuntu4",
        "4.93~RC2-1ubuntu1",
        "4.93-9ubuntu1",
        "4.93-11ubuntu1",
        "4.93-12ubuntu1",
        "4.93-13ubuntu1",
        "4.93-13ubuntu1.1",
        "4.93-13ubuntu1.5",
        "4.93-13ubuntu1.6",
        "4.93-13ubuntu1.7"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "exim4",
            "binary_version": "4.95-4ubuntu2.3"
          },
          {
            "binary_name": "exim4-base",
            "binary_version": "4.95-4ubuntu2.3"
          },
          {
            "binary_name": "exim4-config",
            "binary_version": "4.95-4ubuntu2.3"
          },
          {
            "binary_name": "exim4-daemon-heavy",
            "binary_version": "4.95-4ubuntu2.3"
          },
          {
            "binary_name": "exim4-daemon-light",
            "binary_version": "4.95-4ubuntu2.3"
          },
          {
            "binary_name": "eximon4",
            "binary_version": "4.95-4ubuntu2.3"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "exim4",
        "purl": "pkg:deb/ubuntu/exim4@4.95-4ubuntu2.3?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.95-4ubuntu2.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.94.2-7ubuntu2",
        "4.95-2ubuntu2",
        "4.95-4ubuntu1",
        "4.95-4ubuntu2",
        "4.95-4ubuntu2.1",
        "4.95-4ubuntu2.2"
      ]
    }
  ],
  "aliases": [],
  "details": "Exim AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Exim. Authentication is not required to exploit this vulnerability. The specific flaw exists within the smtp service, which listens on TCP port 25 by default. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of a buffer. An attacker can leverage this vulnerability to execute code in the context of the service account. . Was ZDI-CAN-17434.",
  "id": "UBUNTU-CVE-2023-42115",
  "modified": "2026-04-22T07:45:26Z",
  "published": "2023-09-28T00:00:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2023-42115"
    },
    {
      "type": "REPORT",
      "url": "https://www.zerodayinitiative.com/advisories/ZDI-23-1469/"
    },
    {
      "type": "REPORT",
      "url": "https://www.openwall.com/lists/oss-security/2023/10/02/3"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-6411-1"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-42115"
    }
  ],
  "related": [
    "USN-6411-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2023-42115"
  ]
}

UBUNTU-CVE-2023-42116 (CVE-2023-42116)

Vulnerability from osv_ubuntu – Published: 2023-09-28 00:00 – Updated: 2026-04-22 07:45 – Source website

Details

Exim SMTP Challenge Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Exim. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NTLM challenge requests. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the service account. . Was ZDI-CAN-17515.

Severity

8.1 (High)


                    
                      CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 (Critical)


                    
                      CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2023-42116	REPORT
	https://www.zerodayinitiative.com/advisories/ZDI-…	REPORT
	https://www.openwall.com/lists/oss-security/2023/…	REPORT
	https://ubuntu.com/security/notices/USN-6411-1	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2023-42116	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "exim4",
            "binary_version": "4.82-3ubuntu2.4+esm6"
          },
          {
            "binary_name": "exim4-base",
            "binary_version": "4.82-3ubuntu2.4+esm6"
          },
          {
            "binary_name": "exim4-config",
            "binary_version": "4.82-3ubuntu2.4+esm6"
          },
          {
            "binary_name": "exim4-daemon-heavy",
            "binary_version": "4.82-3ubuntu2.4+esm6"
          },
          {
            "binary_name": "exim4-daemon-light",
            "binary_version": "4.82-3ubuntu2.4+esm6"
          },
          {
            "binary_name": "eximon4",
            "binary_version": "4.82-3ubuntu2.4+esm6"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:14.04:LTS",
        "name": "exim4",
        "purl": "pkg:deb/ubuntu/exim4@4.82-3ubuntu2.4+esm6?arch=source\u0026distro=trusty/esm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.82-3ubuntu2.4+esm6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.80-7ubuntu3",
        "4.80-7ubuntu4",
        "4.80-9ubuntu1",
        "4.80-9ubuntu2",
        "4.82-3ubuntu1",
        "4.82-3ubuntu2",
        "4.82-3ubuntu2.1",
        "4.82-3ubuntu2.2",
        "4.82-3ubuntu2.3",
        "4.82-3ubuntu2.4",
        "4.82-3ubuntu2.4+esm1",
        "4.82-3ubuntu2.4+esm2",
        "4.82-3ubuntu2.4+esm3",
        "4.82-3ubuntu2.4+esm4"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "exim4",
            "binary_version": "4.86.2-2ubuntu2.6+esm4"
          },
          {
            "binary_name": "exim4-base",
            "binary_version": "4.86.2-2ubuntu2.6+esm4"
          },
          {
            "binary_name": "exim4-config",
            "binary_version": "4.86.2-2ubuntu2.6+esm4"
          },
          {
            "binary_name": "exim4-daemon-heavy",
            "binary_version": "4.86.2-2ubuntu2.6+esm4"
          },
          {
            "binary_name": "exim4-daemon-light",
            "binary_version": "4.86.2-2ubuntu2.6+esm4"
          },
          {
            "binary_name": "eximon4",
            "binary_version": "4.86.2-2ubuntu2.6+esm4"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "exim4",
        "purl": "pkg:deb/ubuntu/exim4@4.86.2-2ubuntu2.6+esm4?arch=source\u0026distro=esm-infra/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.86.2-2ubuntu2.6+esm4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.86-3ubuntu1",
        "4.86-7ubuntu1",
        "4.86-7ubuntu2",
        "4.86-7ubuntu3",
        "4.86.2-2ubuntu1",
        "4.86.2-2ubuntu2",
        "4.86.2-2ubuntu2.1",
        "4.86.2-2ubuntu2.2",
        "4.86.2-2ubuntu2.3",
        "4.86.2-2ubuntu2.4",
        "4.86.2-2ubuntu2.5",
        "4.86.2-2ubuntu2.6",
        "4.86.2-2ubuntu2.6+esm1",
        "4.86.2-2ubuntu2.6+esm2"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "exim4",
            "binary_version": "4.90.1-1ubuntu1.10+esm1"
          },
          {
            "binary_name": "exim4-base",
            "binary_version": "4.90.1-1ubuntu1.10+esm1"
          },
          {
            "binary_name": "exim4-config",
            "binary_version": "4.90.1-1ubuntu1.10+esm1"
          },
          {
            "binary_name": "exim4-daemon-heavy",
            "binary_version": "4.90.1-1ubuntu1.10+esm1"
          },
          {
            "binary_name": "exim4-daemon-light",
            "binary_version": "4.90.1-1ubuntu1.10+esm1"
          },
          {
            "binary_name": "eximon4",
            "binary_version": "4.90.1-1ubuntu1.10+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:18.04:LTS",
        "name": "exim4",
        "purl": "pkg:deb/ubuntu/exim4@4.90.1-1ubuntu1.10+esm1?arch=source\u0026distro=esm-infra/bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.90.1-1ubuntu1.10+esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.89-5ubuntu1",
        "4.89-9ubuntu1",
        "4.89-9ubuntu2",
        "4.89-9ubuntu3",
        "4.89-9ubuntu4",
        "4.90.1-1ubuntu1",
        "4.90.1-1ubuntu1.1",
        "4.90.1-1ubuntu1.2",
        "4.90.1-1ubuntu1.3",
        "4.90.1-1ubuntu1.4",
        "4.90.1-1ubuntu1.5",
        "4.90.1-1ubuntu1.8",
        "4.90.1-1ubuntu1.9",
        "4.90.1-1ubuntu1.10"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "exim4",
            "binary_version": "4.93-13ubuntu1.8"
          },
          {
            "binary_name": "exim4-base",
            "binary_version": "4.93-13ubuntu1.8"
          },
          {
            "binary_name": "exim4-config",
            "binary_version": "4.93-13ubuntu1.8"
          },
          {
            "binary_name": "exim4-daemon-heavy",
            "binary_version": "4.93-13ubuntu1.8"
          },
          {
            "binary_name": "exim4-daemon-light",
            "binary_version": "4.93-13ubuntu1.8"
          },
          {
            "binary_name": "eximon4",
            "binary_version": "4.93-13ubuntu1.8"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "exim4",
        "purl": "pkg:deb/ubuntu/exim4@4.93-13ubuntu1.8?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.93-13ubuntu1.8"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.92.1-1ubuntu3",
        "4.92.1-1ubuntu4",
        "4.93~RC2-1ubuntu1",
        "4.93-9ubuntu1",
        "4.93-11ubuntu1",
        "4.93-12ubuntu1",
        "4.93-13ubuntu1",
        "4.93-13ubuntu1.1",
        "4.93-13ubuntu1.5",
        "4.93-13ubuntu1.6",
        "4.93-13ubuntu1.7"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "exim4",
            "binary_version": "4.95-4ubuntu2.3"
          },
          {
            "binary_name": "exim4-base",
            "binary_version": "4.95-4ubuntu2.3"
          },
          {
            "binary_name": "exim4-config",
            "binary_version": "4.95-4ubuntu2.3"
          },
          {
            "binary_name": "exim4-daemon-heavy",
            "binary_version": "4.95-4ubuntu2.3"
          },
          {
            "binary_name": "exim4-daemon-light",
            "binary_version": "4.95-4ubuntu2.3"
          },
          {
            "binary_name": "eximon4",
            "binary_version": "4.95-4ubuntu2.3"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "exim4",
        "purl": "pkg:deb/ubuntu/exim4@4.95-4ubuntu2.3?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.95-4ubuntu2.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.94.2-7ubuntu2",
        "4.95-2ubuntu2",
        "4.95-4ubuntu1",
        "4.95-4ubuntu2",
        "4.95-4ubuntu2.1",
        "4.95-4ubuntu2.2"
      ]
    }
  ],
  "aliases": [],
  "details": "Exim SMTP Challenge Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Exim. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NTLM challenge requests. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the service account. . Was ZDI-CAN-17515.",
  "id": "UBUNTU-CVE-2023-42116",
  "modified": "2026-04-22T07:45:26Z",
  "published": "2023-09-28T00:00:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2023-42116"
    },
    {
      "type": "REPORT",
      "url": "https://www.zerodayinitiative.com/advisories/ZDI-23-1470/"
    },
    {
      "type": "REPORT",
      "url": "https://www.openwall.com/lists/oss-security/2023/10/02/3"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-6411-1"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-42116"
    }
  ],
  "related": [
    "USN-6411-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2023-42116"
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

USN-6411-1 (UBUNTU-CVE-2023-42114)

UBUNTU-CVE-2023-42114 (CVE-2023-42114)

UBUNTU-CVE-2023-42115 (CVE-2023-42115)

UBUNTU-CVE-2023-42116 (CVE-2023-42116)

Tags

Sightings

Nomenclature

Related by attack behaviour