Exim Remote Code Execution Vulnerability

Last Update Date: 12 Jun 2019 Release Date: 10 Jun 2019 4333 Views

RISK: High Risk

TYPE: Security software and application - Security Software & Appliance

A vulnerability was identified in Exim, a remote attacker could exploit this vulnerability to trigger remote code execution on the targeted system.

[Updated 12-June-2019]: We noticed reports of scattered exploitation of this vulnerability. As such, the criticality level is changed from Medium to High.

Impact

Remote Code Execution

System / Technologies affected

Exim versions 4.87 to 4.91

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

Update to version 4.92

Vulnerability Identifier

CVE-2019-10149

Source

AusCERT
SingCERT
Exim