CVE-2017-16943

概要

参考情報

• openwall.com/lists/oss-security/2017/11/25/1 · Mailing List
• openwall.com/lists/oss-security/2017/11/25/2 · Mailing List
• openwall.com/lists/oss-security/2017/11/25/3 · Mailing List
• openwall.com/lists/oss-security/2021/05/04/7
• securitytracker.com/id/1039872 · Third Party Advisory
• bugs.exim.org/show_bug.cgi · Exploit
• git.exim.org/exim.git/commit/4090d62a4b25782129cc1643596dc2f6e8f63bde · Patch
• git.exim.org/exim.git/commitdiff/4e6ae6235c68de243b1c2419027472d7659aa2b4 · Patch
• LetUsFsck/PoC-Exploit-Mirror · Exploit
• lists.exim.org/lurker/message/20171125.034842.d1d75cac.en.html · Mailing List
• debian.org/security/2017/dsa-4053 · Third Party Advisory

exim のその他の脆弱性

• CVE-2026-94057中 5.3Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data…
• CVE-2026-94056高 7.5Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from…
• CVE-2026-94055中 5.3Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free.
• CVE-2026-94054中 5.3Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write.
• CVE-2026-66141高 7.8Exim before 4.99.5 allows .forward privilege escalation because force_command for a pipe transport is mishandled.