CVE-2022-37452 : Exim before 4.95 has a heap-based buffer overflow for the alias list in host

Exim before 4.95 has a heap-based buffer overflow for the alias list in host_name_lookup in host.c when sender_host_name is set.

Published 2022-08-07 18:15:08

Updated 2022-10-28 12:52:47

Source MITRE

View at NVD, CVE.org

Vulnerability category: OverflowMemory Corruption

Products affected by CVE-2022-37452

Debian » Debian Linux » Version: 10.0
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Matching versions
Exim » Exim
Versions before (<) 4.95
cpe:2.3:a:exim:exim:*:*:*:*:*:*:*:*
Matching versions

Top countries where our scanners detected CVE-2022-37452

Top open port discovered on systems with this issue 80

IPs affected by CVE-2022-37452 501,155

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2022-37452!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

EPSS FAQ

0.62%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 79 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

Assigned by: nvd@nist.gov (Primary)

https://github.com/Exim/exim/wiki/EximSecurity

EximSecurity · Exim/exim Wiki · GitHub
Release Notes;Third Party Advisory

CVEs referencing this url
https://github.com/ivd38/exim_overflow

GitHub - ivd38/exim_overflow: Exim heap overflow in host_name_lookup()
Exploit;Patch;Third Party Advisory
https://www.exim.org/static/doc/security/

Index of /static/doc/security/
Vendor Advisory

CVEs referencing this url
https://github.com/Exim/exim/compare/exim-4.94...exim-4.95

Comparing exim-4.94...exim-4.95 · Exim/exim · GitHub
Patch;Release Notes;Third Party Advisory
https://www.openwall.com/lists/oss-security/2022/08/06/8

oss-security - Exim < 4.95 heap overflow
Mailing List;Third Party Advisory
https://github.com/Exim/exim/commit/d4bc023436e4cce7c23c5f8bb5199e178b4cc743

Fix host_name_lookup (Close 2747) · Exim/exim@d4bc023 · GitHub
Patch;Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/08/msg00014.html

[SECURITY] [DLA 3082-1] exim4 security update
Mailing List;Third Party Advisory

Jump to