Exim 4.92 through 4.92.2 allows remote code execution, a different vulnerability than CVE-2019-15846. There is a heap-based buffer overflow in string_vformat in string.c involving a long EHLO command.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
History
24 Jul 2024, 14:24
Type | Values Removed | Values Added |
---|---|---|
References | () http://www.openwall.com/lists/oss-security/2019/09/28/1 - Exploit, Mailing List, Mitigation, Third Party Advisory | |
References | () http://www.openwall.com/lists/oss-security/2019/09/28/2 - Exploit, Mailing List, Third Party Advisory | |
References | () https://git.exim.org/exim.git/commit/478effbfd9c3cc5a627fc671d4bf94d13670d65f - Patch | |
References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EED7HM3MFIBAP5OIMJAFJ35JAJABTVSC/ - Release Notes | |
References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T3TJW4HPYH3O5HZCWGD6NSHTEBTTAPDC/ - Release Notes | |
References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UY6HPRW7MR3KBQ5JFHH6OXM7YCZBJCOB/ - Release Notes |
07 Nov 2023, 03:06
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Information
Published : 2019-09-27 21:15
Updated : 2024-07-24 14:24
NVD link : CVE-2019-16928
Mitre link : CVE-2019-16928
CVE.ORG link : CVE-2019-16928
JSON object : View
Products Affected
fedoraproject
- fedora
canonical
- ubuntu_linux
exim
- exim
debian
- debian_linux
CWE
CWE-787
Out-of-bounds Write