Buffer overflow in Exim - CVE-2018-6789

Vulnerability identifier: #VU10442

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-6789

CWE-ID: CWE-120

Exploitation vector: Remote access

Exploit availability: The vulnerability is being exploited in the wild

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The weakness exists in the SMTP listener due to improper bounds checking. A remote attacker can send a specially crafted message, trigger buffer overflow and execute arbitrary code with privileges of the Exim user.

Successful exploitation of the vulnerability may result in system compromise.

Exim
Debian Linux
Amazon Linux AMI
Arch Linux
Gentoo Linux
Fedora
Ubuntu
Opensuse
exim (Alpine package)
exim

Update to version 4.90.1.

exim (Alpine package) - update to 4.90.1-r0
exim - addressed in versions 4.90.1-1.el6, 4.90.1-1.el7, 4.90.1-1.fc26, 4.90.1-1.fc27, 4.90.1-2.el6, 4.90.1-2.el7, 4.90.1-2.fc26, 4.90.1-2.fc27

• Exploit #6303 - Exim < 4.90.1 - 'base64d' Remote Code Execution (June 17, 2021)
• Exploit #6051 - exim 4.90 - Remote Code Execution (June 17, 2021)
• Exploit #2030 - Exim-CVE-2018-6789 (PoC materials to exploit CVE-2018-6789) (March 18, 2020)
• Exploit #181 - exim-rce-cve-2018-6789 (This repository provides a learning environment to understand how an Exim RCE exploit for CVE-2018-6789 works.) (March 18, 2020)

• https://exim.org/static/doc/security/CVE-2018-6789.txt

• Remote code execution in Exim
• Debian update for exim4
• Ubuntu update for Exim
• Arch Linux update for exim
• openSUSE update for exim
• Gentoo update for Exim
• Amazon Linux AMI update for exim
• Buffer overflow in exim (Alpine package)
• Fedora 27 update for exim
• Fedora 26 update for exim
• Fedora EPEL 7 update for exim
• Fedora EPEL 6 update for exim
• Fedora EPEL 6 update for exim
• Fedora EPEL 7 update for exim
• Fedora 27 update for exim
• Fedora 26 update for exim