9.0Kritik KEV

CVE-2019-10149Exim Mail Transfer Agent (MTA) Improper Input Validation

exim exim Yayım: 2019-06-05 03:00 (7 yıl önce)

Aktif olarak istismar ediliyor — Exim Mail Transfer Agent (MTA) Improper Input Validation

CISA bu açığın gerçek saldırılarda kullanıldığını 10.01.2022 tarihinde doğruladı. ABD federal kurumları için düzeltme son tarihi: 10.07.2022.

Gerekli işlem: Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2019-10149

Açıklama

A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution.

Zayıflık türü (CWE): CWE-78

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

Üretici	Ürün	Sürümler
canonical	ubuntu linux	18.04
debian	debian linux	9.0
exim	exim	4.92

Kaynaklar ve yamalar

[oss-security] 20190605 Re: CVE-2019-10149: Exim 4.87 to 4.91: possible remote exploit mailing-listMailing ListThird Party Advisory
USN-4010-1 vendor-advisoryThird Party Advisory
[oss-security] 20190605 Re: CVE-2019-10149: Exim 4.87 to 4.91: possible remote exploit mailing-listMailing ListPatchThird Party Advisory
[oss-security] 20190605 Re: CVE-2019-10149: Exim 4.87 to 4.91: possible remote exploit mailing-listExploitMailing List
DSA-4456 vendor-advisoryThird Party Advisory
20190605 [SECURITY] [DSA 4456-1] exim4 security update mailing-listMailing ListThird Party Advisory
GLSA-201906-01 vendor-advisoryThird Party Advisory
[oss-security] 20190606 Re: CVE-2019-10149: Exim 4.87 to 4.91: possible remote exploit mailing-listExploitMailing ListThird Party Advisory
108679 vdb-entryBroken LinkThird Party AdvisoryVDB Entry
openSUSE-SU-2019:1524 vendor-advisoryMailing ListThird Party Advisory
20190611 The Return of the WIZard: RCE in Exim (CVE-2019-10149) mailing-listMailing ListThird Party Advisory
[oss-security] 20190725 Re: Statistics for distros lists updated for 2019Q2 mailing-listMailing ListThird Party Advisory
[oss-security] 20190725 Re: Statistics for distros lists updated for 2019Q2 mailing-listMailing ListThird Party Advisory
[oss-security] 20190726 Re: Statistics for distros lists updated for 2019Q2 mailing-listMailing ListThird Party Advisory
[oss-security] 20210504 21Nails: Multiple vulnerabilities in Exim mailing-listMailing ListThird Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10149 Issue TrackingThird Party Advisory
https://www.exim.org/static/doc/security/CVE-2019-10149.txt Vendor Advisory
http://packetstormsecurity.com/files/153218/Exim-4.9.1-Remote-Command-Execution.html ExploitThird Party AdvisoryVDB Entry
http://packetstormsecurity.com/files/153312/Exim-4.91-Local-Privilege-Escalation.html ExploitThird Party AdvisoryVDB Entry
http://packetstormsecurity.com/files/154198/Exim-4.91-Local-Privilege-Escalation.html ExploitThird Party AdvisoryVDB Entry
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-10149 US Government Resource

CPE eşleşmeleri (NVD) (4)

cpe:2.3:a:exim:exim:*:*:*:*:*:*:*:* ≥ 4.87 ≤ 4.91
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

CVSS puanı

9.0Kritik

Kaynak: redhat · CVSS 3.0

Saldırı yolu: Ağ
Karmaşıklık: Yüksek
Gereken yetki: Yok
Kullanıcı etkileşimi: Gerekmez
Kapsam: Değişir
Gizlilik: Yüksek
Bütünlük: Yüksek
Erişilebilirlik: Yüksek

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Tüm puanlar (4)

cna	CVSS 3.0	9.0Kritik
nvd	CVSS 3.1	9.8Kritik
secalert@redhat.com	CVSS 3.0	9.0Kritik
nvd	CVSS 2.0	10.0Yüksek

EPSS (30 günde istismar olasılığı)

99.96%

tüm CVE'lerin %100'inden yüksek

CISA değerlendirmesi (SSVC)

İstismar: active
Otomatikleştirilebilir: no
Teknik etki: total

Zaman çizelgesi

Numara ayrıldı2019-03-27
Yayımlandı2019-06-05 03:00
IP-DB'ye ulaştı2026-10-24 23:34
KEV'e eklendi2022-01-10
Son güncelleme2026-06-17 05:10

Numarayı veren (CNA): redhat
NVD durumu: Analyzed

Kaynakta görüntüle: CVE.org · NVD

Bu ürünlerde yeni bir açık çıktığında haber alın

E-posta uyarılarını aç

Ücretsiz · üyelikle · istediğiniz an kapatılır

Aynı üründe son açıklar — Debian

9.2Kritik

CVE-2026-111497 KEV 14 gün önce

Out-of-Bounds Write in Google Brotli Decoder

Google Brotli; Siemens Desigo CC family V8; Siemens Desigo CC family V9; Siemens Heliox Dual Port 60kW

A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause …

83%EPSS

8.4Yüksek

CVE-2026-77118 2 ay önce

Out-of-bounds write in GraphicsMagick PCD decoder

GraphicsMagick Group GraphicsMagick; Debian graphicsmagick; Fedora Project GraphicsMagick

A heap out-of-bounds write exists in the Photo CD (PCD) decoder of GraphicsMagick. In DecodeImage() (coders/pcd.c), the Huffman delta loop advances its output pointer with q++ after every decoded delta and never checks it against the end of the heap-allocated…

6.0Orta

CVE-2026-12996 3 ay önce

OpenVPN OpenVPN

A use-after-free in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenticated peers to potentially cause a denial of service or leak memory via crafted packets during TLS session promotion or expiry

5.6Orta

CVE-2026-14355 4 ay önce

ext/openssl: Memory corruption in openssl_encrypt with AES-WRAP-PAD

php php

In PHP versions 8.2.* before 8.2.32, 8.3.* before 8.3.32, 8.4.* before 8.4.23, 8.5.* before 8.5.8, the AES-WRAP-PAD algorithm implementation in OpenSSL extension contains a buffer allocation flaw. The output buffer for the AES key-wrap-with-padding operation …

3.7Düşük

CVE-2026-56968 4 ay önce

GNU GNU SASL

GNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the NTLM client, which could result in memory disclosure via a crafted server.

7.5Yüksek

CVE-2026-49975 5 ay önce

Apache HTTP Server: mod_http2 denial of service

Apache Software Foundation Apache HTTP Server; Red Hat JBoss Core Services for RHEL 8; Red Hat JBoss Core Services on RHEL 7; Red Hat Red Hat Enterprise Linux 10

Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests. This issue affects Apache HTTP Server: from 2.4.17 through 2.4.67.

33%EPSS