CVE-2010-4344
Critical · 9.8 CISA KEVCVSS
9.8
EPSS
71.7%
Published
Dec 14, 2010
CISA due date
Apr 15, 2022
The record
Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session that includes two MAIL commands in conjunction with a large message containing crafted headers, leading to improper rejection logging.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | exim4 | 0 | 4.70-1 |
| Debian:12 | exim4 | 0 | 4.70-1 |
| Debian:13 | exim4 | 0 | 4.70-1 |
| Debian:5.0 | exim4 | 0 | 4.69-9+lenny1 |
| Red Hat:enterprise_linux:4::as | exim | 0 | 0:4.43-1.RHEL4.5.el4_8.1 |
| Red Hat:enterprise_linux:4::as | exim-debuginfo | 0 | 0:4.43-1.RHEL4.5.el4_8.1 |
| Red Hat:enterprise_linux:4::as | exim-doc | 0 | 0:4.43-1.RHEL4.5.el4_8.1 |
| Red Hat:enterprise_linux:4::as | exim-mon | 0 | 0:4.43-1.RHEL4.5.el4_8.1 |
| Red Hat:enterprise_linux:4::as | exim-sa | 0 | 0:4.43-1.RHEL4.5.el4_8.1 |
| Red Hat:enterprise_linux:4::desktop | exim | 0 | 0:4.43-1.RHEL4.5.el4_8.1 |
| Red Hat:enterprise_linux:4::desktop | exim-debuginfo | 0 | 0:4.43-1.RHEL4.5.el4_8.1 |
| Red Hat:enterprise_linux:4::desktop | exim-doc | 0 | 0:4.43-1.RHEL4.5.el4_8.1 |
| Red Hat:enterprise_linux:4::desktop | exim-mon | 0 | 0:4.43-1.RHEL4.5.el4_8.1 |
| Red Hat:enterprise_linux:4::desktop | exim-sa | 0 | 0:4.43-1.RHEL4.5.el4_8.1 |
| Red Hat:enterprise_linux:4::es | exim | 0 | 0:4.43-1.RHEL4.5.el4_8.1 |
| Red Hat:enterprise_linux:4::es | exim-debuginfo | 0 | 0:4.43-1.RHEL4.5.el4_8.1 |
| Red Hat:enterprise_linux:4::es | exim-doc | 0 | 0:4.43-1.RHEL4.5.el4_8.1 |
| Red Hat:enterprise_linux:4::es | exim-mon | 0 | 0:4.43-1.RHEL4.5.el4_8.1 |
| Red Hat:enterprise_linux:4::es | exim-sa | 0 | 0:4.43-1.RHEL4.5.el4_8.1 |
| Red Hat:enterprise_linux:4::ws | exim | 0 | 0:4.43-1.RHEL4.5.el4_8.1 |
| Red Hat:enterprise_linux:4::ws | exim-debuginfo | 0 | 0:4.43-1.RHEL4.5.el4_8.1 |
| Red Hat:enterprise_linux:4::ws | exim-doc | 0 | 0:4.43-1.RHEL4.5.el4_8.1 |
| Red Hat:enterprise_linux:4::ws | exim-mon | 0 | 0:4.43-1.RHEL4.5.el4_8.1 |
| Red Hat:enterprise_linux:4::ws | exim-sa | 0 | 0:4.43-1.RHEL4.5.el4_8.1 |
| Red Hat:enterprise_linux:5::client | exim | 0 | 0:4.63-5.el5_5.2 |
| Red Hat:enterprise_linux:5::client | exim-debuginfo | 0 | 0:4.63-5.el5_5.2 |
| Red Hat:enterprise_linux:5::client | exim-mon | 0 | 0:4.63-5.el5_5.2 |
| Red Hat:enterprise_linux:5::client | exim-sa | 0 | 0:4.63-5.el5_5.2 |
| Red Hat:enterprise_linux:5::server | exim | 0 | 0:4.63-5.el5_5.2 |
| Red Hat:enterprise_linux:5::server | exim-debuginfo | 0 | 0:4.63-5.el5_5.2 |
| Red Hat:enterprise_linux:5::server | exim-mon | 0 | 0:4.63-5.el5_5.2 |
| Red Hat:enterprise_linux:5::server | exim-sa | 0 | 0:4.63-5.el5_5.2 |
| Red Hat:rhel_eus:4.7::as | exim | 0 | 0:4.43-1.RHEL4.5.el4_7.1 |
| Red Hat:rhel_eus:4.7::as | exim-debuginfo | 0 | 0:4.43-1.RHEL4.5.el4_7.1 |
| Red Hat:rhel_eus:4.7::as | exim-doc | 0 | 0:4.43-1.RHEL4.5.el4_7.1 |
| Red Hat:rhel_eus:4.7::as | exim-mon | 0 | 0:4.43-1.RHEL4.5.el4_7.1 |
| Red Hat:rhel_eus:4.7::as | exim-sa | 0 | 0:4.43-1.RHEL4.5.el4_7.1 |
| Red Hat:rhel_eus:4.7::es | exim | 0 | 0:4.43-1.RHEL4.5.el4_7.1 |
| Red Hat:rhel_eus:4.7::es | exim-debuginfo | 0 | 0:4.43-1.RHEL4.5.el4_7.1 |
| Red Hat:rhel_eus:4.7::es | exim-doc | 0 | 0:4.43-1.RHEL4.5.el4_7.1 |
| Red Hat:rhel_eus:4.7::es | exim-mon | 0 | 0:4.43-1.RHEL4.5.el4_7.1 |
| Red Hat:rhel_eus:4.7::es | exim-sa | 0 | 0:4.43-1.RHEL4.5.el4_7.1 |
| Red Hat:rhel_eus:5.3 | exim | 0 | 0:4.63-3.el5_3.1 |
| Red Hat:rhel_eus:5.3 | exim-debuginfo | 0 | 0:4.63-3.el5_3.1 |
| Red Hat:rhel_eus:5.3 | exim-mon | 0 | 0:4.63-3.el5_3.1 |
| Red Hat:rhel_eus:5.3 | exim-sa | 0 | 0:4.63-3.el5_3.1 |
| Red Hat:rhel_eus:5.4 | exim | 0 | 0:4.63-3.el5_4.1 |
| Red Hat:rhel_eus:5.4 | exim-debuginfo | 0 | 0:4.63-3.el5_4.1 |
| Red Hat:rhel_eus:5.4 | exim-mon | 0 | 0:4.63-3.el5_4.1 |
| Red Hat:rhel_eus:5.4 | exim-sa | 0 | 0:4.63-3.el5_4.1 |
| openSUSE:Tumbleweed | exim | 0 | 4.86.2-2.2 |
Related vulnerabilities
- CVE-2023-42115 Exim AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability. Also affects exim4
- CVE-2023-42117 Exim Improper Neutralization of Special Elements Remote Code Execution Vulnerability. Also affects exim4
- CVE-2023-42116 Exim SMTP Challenge Stack-based Buffer Overflow Remote Code Execution Vulnerability. Also affects exim4
- CVE-2023-42119 Exim dnsdb Out-Of-Bounds Read Information Disclosure Vulnerability. Also affects exim4
- CVE-2023-42114 Exim NTLM Challenge Out-Of-Bounds Read Information Disclosure Vulnerability. Also affects exim4
- CVE-2022-3559 A vulnerability was found in Exim and classified as problematic. Also affects exim4
- CVE-2017-16944 The receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89 allows… Also affects exim4
- CVE-2017-16943 The receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89 allows… Also affects exim4