SMTP: Exim string_vformat Heap-based Buffer Overflow

This signature detects attempts to exploit a known vulnerability against Exim SMTP server. A successful attack can lead to a arbitrary remote code execution or a denial of service condition on the target server.

Extended Description

Exim 4.92 through 4.92.2 allows remote code execution, a different vulnerability than CVE-2019-15846. There is a heap-based buffer overflow in string_vformat in string.c involving a long EHLO command.

Affected Products

Fedoraproject fedora

References

CVE: CVE-2019-16928

URL: https://www.exim.org/static/doc/security/cve-2019-16928.txt https://bugs.exim.org/show_bug.cgi?id=2449

Short Name

SMTP:OVERFLOW:EXIM-STRING-BO

Severity

Major

Recommended

True

Recommended Action

None

SMTP: Exim string_vformat Heap-based Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?