Information disclosure in Exim - CVE-2016-9963
Published: December 19, 2016 / Updated: January 5, 2017
Vulnerability identifier: #VU1432
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2016-9963
CWE-ID: CWE-200
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to obtain potentially sensitive information.
The vulnerability exists due to usage of incorrect buffer when displaying error message for DATA command in src/src/transports/smtp.c file. A remote unauthenticated attacker can send a specially crafted SMTP command and obtain potentially sensitive information, such as DKIM key.
Affected software
Exim
Amazon Linux AMI
Fedora
Ubuntu
Opensuse
exim
Amazon Linux AMI
Fedora
Ubuntu
Opensuse
exim
How to mitigate CVE-2016-9963
Install the latest version 4.87.1 or 4.88, which fixes this vulnerability.
exim - addressed in versions 4.87.1-1.fc24, 4.87.1-1.fc25, 4.88-1.el6, 4.88-2.el6, 4.88-2.el7, 4.88-3.el7