CVE-2019-15846

Description

References

• exim.org/static/doc/security/CVE-2019-15846.txt · Mitigation
• lists.opensuse.org/opensuse-security-announce/2019-09/msg00024.html
• openwall.com/lists/oss-security/2019/09/06/2
• openwall.com/lists/oss-security/2019/09/06/4
• openwall.com/lists/oss-security/2019/09/06/5
• openwall.com/lists/oss-security/2019/09/06/6
• openwall.com/lists/oss-security/2019/09/06/8
• openwall.com/lists/oss-security/2019/09/07/1
• openwall.com/lists/oss-security/2019/09/07/2
• openwall.com/lists/oss-security/2019/09/08/1
• openwall.com/lists/oss-security/2019/09/09/1
• exim.org/static/doc/security/CVE-2019-15846.txt
• lists.debian.org/debian-lts-announce/2019/09/msg00004.html · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FT3GY7V7SR2RHKNZNQCGXFWUSILVSZNU
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NDF37AUNETIOXY6ZLQAUBGBVUTMMV242
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SBNHDAF74RI6VK2JVSEIE3VYNL7JJDYM
• seclists.org/bugtraq/2019/Sep/13 · Mailing List
• security.gentoo.org/glsa/201909-06
• usn.ubuntu.com/4124-1
• usn.ubuntu.com/4124-2
• debian.org/security/2019/dsa-4517
• kb.cert.org/vuls/id/672565
• openwall.com/lists/oss-security/2019/09/06/1 · Mailing List

exim의 다른 취약점

• CVE-2026-94057보통 5.3Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data…
• CVE-2026-94056높음 7.5Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from…
• CVE-2026-94055보통 5.3Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free.
• CVE-2026-94054보통 5.3Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write.
• CVE-2026-66141높음 7.8Exim before 4.99.5 allows .forward privilege escalation because force_command for a pipe transport is mishandled.