CVE-2017-16943
Severity Score
9.8
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
3
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via vectors involving BDAT commands.
La función receive_msg en receive.c en el demonio SMTP en Exim 4.88 y 4.89 permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (uso de memoria previamente liberada) mediante vectores relacionados con comandos BDAT.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2017-11-25 CVE Reserved
- 2017-11-25 CVE Published
- 2019-11-14 First Exploit
- 2024-08-05 CVE Updated
- 2024-08-12 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-416: Use After Free
CAPEC
References (12)
| URL | Tag | Source |
|---|---|---|
| http://openwall.com/lists/oss-security/2017/11/25/1 | Mailing List | |
| http://openwall.com/lists/oss-security/2017/11/25/2 | Mailing List | |
| http://openwall.com/lists/oss-security/2017/11/25/3 | Mailing List | |
| http://www.openwall.com/lists/oss-security/2021/05/04/7 | Mailing List |
|
| http://www.securitytracker.com/id/1039872 | Third Party Advisory | |
| https://lists.exim.org/lurker/message/20171125.034842.d1d75cac.en.html | Mailing List |
| URL | Date | SRC |
|---|---|---|
| https://github.com/beraphin/CVE-2017-16943 | 2019-11-14 | |
| https://bugs.exim.org/show_bug.cgi?id=2199 | 2024-08-05 | |
| https://github.com/LetUsFsck/PoC-Exploit-Mirror/tree/master/CVE-2017-16944 | 2024-08-05 |
| URL | Date | SRC |
|---|---|---|
| https://git.exim.org/exim.git/commit/4090d62a4b25782129cc1643596dc2f6e8f63bde | 2021-05-04 | |
| https://git.exim.org/exim.git/commitdiff/4e6ae6235c68de243b1c2419027472d7659aa2b4 | 2021-05-04 |
| URL | Date | SRC |
|---|---|---|
| https://www.debian.org/security/2017/dsa-4053 | 2021-05-04 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Exim Search vendor "Exim" | Exim Search vendor "Exim" for product "Exim" | 4.88 Search vendor "Exim" for product "Exim" and version "4.88" | - |
Affected
| ||||||
| Exim Search vendor "Exim" | Exim Search vendor "Exim" for product "Exim" | 4.89 Search vendor "Exim" for product "Exim" and version "4.89" | - |
Affected
| ||||||
| Debian Search vendor "Debian" | Debian Linux Search vendor "Debian" for product "Debian Linux" | 9.0 Search vendor "Debian" for product "Debian Linux" and version "9.0" | - |
Affected
| ||||||