CVE-2017-16944
Exim 4.89 - 'BDAT' Denial of Service
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
2Exploited in Wild
-Decision
Descriptions
The receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89 allows remote attackers to cause a denial of service (infinite loop and stack exhaustion) via vectors involving BDAT commands and an improper check for a '.' character signifying the end of the content, related to the bdat_getc function.
La función receive_msg en receive.c en el demonio SMTP en Exim 4.88 y 4.89 permite que atacantes remotos provoquen una denegación de servicio (bucle infinito y agotamiento de pila) mediante vectores relacionados con comandos BDAT y una comprobación infinita para un carácter "." que implique el fin del contexto. Esto se relaciona con la función bdat_getc.
Exim version 4.89 suffers from a denial of service vulnerability while parsing the BDAT data header.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2017-11-25 CVE Reserved
- 2017-11-25 CVE Published
- 2024-02-29 EPSS Updated
- 2024-08-05 CVE Updated
- 2024-08-05 First Exploit
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')
CAPEC
References (9)
| URL | Tag | Source |
|---|---|---|
| http://openwall.com/lists/oss-security/2017/11/25/1 | Mailing List | |
| http://openwall.com/lists/oss-security/2017/11/25/2 | Mailing List | |
| http://openwall.com/lists/oss-security/2017/11/25/3 | Mailing List | |
| http://www.openwall.com/lists/oss-security/2021/05/04/7 | Mailing List |
|
| http://www.securitytracker.com/id/1039873 | Third Party Advisory | |
| https://lists.exim.org/lurker/message/20171125.034842.d1d75cac.en.html | Mailing List |
| URL | Date | SRC |
|---|---|---|
| https://www.exploit-db.com/exploits/43184 | 2024-08-05 | |
| https://bugs.exim.org/show_bug.cgi?id=2201 | 2024-08-05 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.debian.org/security/2017/dsa-4053 | 2021-05-04 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Exim Search vendor "Exim" | Exim Search vendor "Exim" for product "Exim" | 4.88 Search vendor "Exim" for product "Exim" and version "4.88" | - |
Affected
| ||||||
| Exim Search vendor "Exim" | Exim Search vendor "Exim" for product "Exim" | 4.89 Search vendor "Exim" for product "Exim" and version "4.89" | - |
Affected
| ||||||
| Debian Search vendor "Debian" | Debian Linux Search vendor "Debian" for product "Debian Linux" | 9.0 Search vendor "Debian" for product "Debian Linux" and version "9.0" | - |
Affected
| ||||||