Memory corruption in Exim - CVE-2017-1000369

Detailed vulnerability description

The vulnerability allows a local attacker to gain elevated privileges on the target system.

The vulnerability exists due to memory management errors in implementation of various functions under multiple operating systems. A local or remote attacker can overflow group_list[] buffer in Exim main() function to manipulate the heap/stack, trigger memory corruption and execute arbitrary code on the target system.

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.

How to mitigate CVE-2017-1000369

Sources

• https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt
• https://github.com/Exim/exim/commit/65e061b76867a9ea7aeeb535341b790b90ae6c21