CVE catalog

CVE-2023-42116

exim4: CVE-2023-42116

[CVE catalog]

Severity
Critical · CVSS 9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
3.76% · Oct 25, 2026

Exim SMTP Challenge Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Exim. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NTLM challenge requests. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the service account. . Was ZDI-CAN-17515.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianexim4sid4.100.1-4fixed
Debianexim4forky4.100.1-4fixed
Debianexim4trixie4.98.2-1+deb13u4fixed
Debianexim4trixie-security4.98.2-1+deb13u5fixed
Debianexim4bookworm4.96-15+deb12u10fixed
Debianexim4bookworm-security4.96-15+deb12u10fixed
Ubuntuexim4pro4.89-5ubuntu1vulnerable
Ubuntuexim4pro4.89-9ubuntu1vulnerable
Ubuntuexim4pro4.89-9ubuntu2vulnerable
Ubuntuexim4pro4.89-9ubuntu3vulnerable
Ubuntuexim4pro4.89-9ubuntu4vulnerable
Ubuntuexim4pro4.90.1-1ubuntu1vulnerable
Ubuntuexim4pro4.90.1-1ubuntu1.1vulnerable
Ubuntuexim4pro4.90.1-1ubuntu1.2vulnerable
Ubuntuexim4pro4.90.1-1ubuntu1.3vulnerable
Ubuntuexim4pro4.90.1-1ubuntu1.4vulnerable
Ubuntuexim4pro4.90.1-1ubuntu1.5vulnerable
Ubuntuexim4pro4.90.1-1ubuntu1.8vulnerable
Ubuntuexim4pro4.90.1-1ubuntu1.9vulnerable
Ubuntuexim4pro4.90.1-1ubuntu1.10vulnerable
Ubuntuexim4pro4.90.1-1ubuntu1.10+esm1fixed
Ubuntuexim420.044.92.1-1ubuntu3vulnerable
Ubuntuexim420.044.92.1-1ubuntu4vulnerable
Ubuntuexim420.044.93~RC2-1ubuntu1vulnerable
Ubuntuexim420.044.93-9ubuntu1vulnerable
Ubuntuexim420.044.93-11ubuntu1vulnerable
Ubuntuexim420.044.93-12ubuntu1vulnerable
Ubuntuexim420.044.93-13ubuntu1vulnerable
Ubuntuexim420.044.93-13ubuntu1.1vulnerable
Ubuntuexim420.044.93-13ubuntu1.5vulnerable
Ubuntuexim420.044.93-13ubuntu1.6vulnerable
Ubuntuexim420.044.93-13ubuntu1.7vulnerable
Ubuntuexim420.044.93-13ubuntu1.8fixed
Ubuntuexim422.044.94.2-7ubuntu2vulnerable
Ubuntuexim422.044.95-2ubuntu2vulnerable
Ubuntuexim422.044.95-4ubuntu1vulnerable
Ubuntuexim422.044.95-4ubuntu2vulnerable
Ubuntuexim422.044.95-4ubuntu2.1vulnerable
Ubuntuexim422.044.95-4ubuntu2.2vulnerable
Ubuntuexim422.044.95-4ubuntu2.3fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianexim4sourcesid4.97~RC1-2not yet assignedNot reportedNot reported
Debianexim4sourceforky4.97~RC1-2not yet assignedNot reportedNot reported
Debianexim4sourcetrixie4.97~RC1-2not yet assignedNot reportedNot reported
Debianexim4sourcebookworm4.96-15+deb12u2not yet assignedNot reportedNot reported
Ubuntuexim4debpro4.90.1-1ubuntu1.10+esm1Not reportedUBUNTU-CVE-2023-42116Not reported
Ubuntuexim4deb20.044.93-13ubuntu1.8Not reportedUBUNTU-CVE-2023-42116Not reported
Ubuntuexim4deb22.044.95-4ubuntu2.3Not reportedUBUNTU-CVE-2023-42116Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]