CVE-2017-1000369
Publication date 19 June 2017
Last updated 24 July 2024
Ubuntu priority
Exim supports the use of multiple "-p" command line arguments which are malloc()'ed and never free()'ed, used in conjunction with other issues allows attackers to cause arbitrary code execution. This affects exim version 4.89 and earlier. Please note that at this time upstream has released a patch (commit 65e061b76867a9ea7aeeb535341b790b90ae6c21), but it is not known if a new point release is available that addresses this issue at this time.
From the Ubuntu Security Team
It was discovered that Exim did not properly deallocate memory when processing certain command line arguments. A local attacker could use this in conjunction with another vulnerability to possibly execute arbitrary code and gain administrative privileges.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| exim4 | ||
| 16.04 LTS xenial |
Fixed 4.86.2-2ubuntu2.2
|
|
| 14.04 LTS trusty |
Fixed 4.82-3ubuntu2.3
|
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score |
4.0 · Medium
|
| Attack vector | Local |
| Attack complexity | Low |
| Privileges required | None |
| User interaction | None |
| Scope | Unchanged |
| Confidentiality | None |
| Integrity impact | Low |
| Availability impact | None |
| Vector | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N |
References
Related Ubuntu Security Notices (USN)
- USN-3322-1
- Exim vulnerability
- 19 June 2017