SB2022112417 - Denial of service in Exim

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2022112417

SB2022112417 - Denial of service in Exim

Published: November 24, 2022

Security Bulletin ID SB2022112417
Severity
Medium
Patch available
NO
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Denial of service

Breakdown by Severity

Medium 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Use-after-free (CVE-ID: CVE-2022-3559)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a use-after-free error in the regex handler. A remote attacker can send specially crafted data to the mail server, trigger a use-after-free error and perform a denial of service (DoS) attack.

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.


Remediation

Cybersecurity Help is not aware of any official remediation provided by the vendor.

References