超危
Exim string_vformat缓冲区溢出漏洞
2019-09-27 20:07:12 公开 ，2026-02-20 21:27:51 更新
- 关键漏洞
- CISA KEV
- APT漏洞
- 远程
- 无需认证
- CWE Top 25 (2023)
- 开源组件漏洞
- CWE Top 25 (2024)
- 公开PoC
- CWEs：
- CWE-787 （Out-of-bounds Write）
- SSVC：
- 可利用状态：已被积极利用攻击自动化：是技术影响评估：全部 2025-02-05 04:03:35
风险信息
- CVSS v2 向量
- AV:N/AC:L/Au:N/C:P/I:P/A:P
- CVSS v2 风险值
- 7.5
- CVSS v3 向量
- AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS v3 风险值
- 9.8
- CVSS v3.1 向量
- AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS v3.1 风险值
- 9.8
详细信息
- 漏洞类型
- 缓冲区错误
- 漏洞描述
- Exim是一个运行于Unix系统中的开源消息传送代理（MTA），它主要负责邮件的路由、转发和投递。Exim 4.92版本至4.92.2版本易受基于堆的缓冲区溢出的影响，这是由string.c中的string_vformat函数不正确的边界检查引起的。通过发送过长的EHLO命令，远程攻击者可以溢出缓冲区并在系统上执行任意代码。
- 修复建议
- 升级到最新版本的Exim（4.92.3或更高版本），可从Exim网站获得： https://exim.org
参考链接
- https://lists.exim.org/lurker/message/20190927.032457.c1044d4c.en.html
OSV · x_refsource_MISC
- https://git.exim.org/exim.git/commit/478effbfd9c3cc5a627fc671d4bf94d13670d65f
OSV · x_refsource_MISC
- https://bugs.exim.org/show_bug.cgi?id=2449
OSV · x_refsource_MISC
- https://usn.ubuntu.com/4141-1/
OSV · vendor-advisory · x_refsource_UBUNTU
- https://www.debian.org/security/2019/dsa-4536
OSV · vendor-advisory · x_refsource_DEBIAN
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T3TJW4HPYH3O5HZCWGD6NSHTEBTTAPDC/
NVD
- https://seclists.org/bugtraq/2019/Sep/60
OSV · mailing-list · x_refsource_BUGTRAQ
- http://www.openwall.com/lists/oss-security/2019/09/28/1
OSV · mailing-list · x_refsource_MLIST
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UY6HPRW7MR3KBQ5JFHH6OXM7YCZBJCOB/
NVD
- http://www.openwall.com/lists/oss-security/2019/09/28/2
OSV · mailing-list · x_refsource_MLIST
- http://www.openwall.com/lists/oss-security/2019/09/28/3
OSV · mailing-list · x_refsource_MLIST
- http://www.openwall.com/lists/oss-security/2019/09/28/4
OSV · mailing-list · x_refsource_MLIST
- https://packetstormsecurity.com/files/154685/Debian-Security-Advisory-4536-1.html
- https://www.auscert.org.au/bulletins/ESB-2019.3660.2/
- https://vigilance.fr/vulnerability/Exim-buffer-overflow-in-string-vformat-30470
- https://www.auscert.org.au/bulletins/ESB-2019.3664/
- https://nvd.nist.gov/vuln/detail/CVE-2019-16928
- https://security.gentoo.org/glsa/202003-47
OSV · vendor-advisory · x_refsource_GENTOO
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EED7HM3MFIBAP5OIMJAFJ35JAJABTVSC/
OSV · vendor-advisory · x_refsource_FEDORA
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T3TJW4HPYH3O5HZCWGD6NSHTEBTTAPDC/
OSV · vendor-advisory · x_refsource_FEDORA
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UY6HPRW7MR3KBQ5JFHH6OXM7YCZBJCOB/
OSV · vendor-advisory · x_refsource_FEDORA
- https://osv.dev/vulnerability/CVE-2019-16928
OSV
- https://osv.dev/vulnerability/DSA-4536-1
OSV
- https://security-tracker.debian.org/tracker/CVE-2019-16928
OSV
- https://osv.dev/vulnerability/DEBIAN-CVE-2019-16928
OSV
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-16928
NVD · US Government Resource