https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 01:53:31 +0000 https://vulnerability.circl.lu/vuln/cve-2017-1000369 <p>Exim supports the use of multiple &#34;-p&#34; command line arguments which are malloc()&#39;ed and never free()&#39;ed, used in conjunction with other issues allows attackers to cause arbitrary code execution. This affects exim version 4.89 and earlier. Please note that at this time upstream has released a patch (commit 65e061b76867a9ea7aeeb535341b790b90ae6c21), but it is not known if a new point release is available that addresses this issue at this time.</p> <p>Exim supports the use of multiple &#34;-p&#34; command line arguments which are malloc()&#39;ed and never free()&#39;ed, used in conjunction with other issues allows attackers to cause arbitrary code execution. This affects exim version 4.89 and earlier. Please note that at this time upstream has released a patch (commit 65e061b76867a9ea7aeeb535341b790b90ae6c21), but it is not known if a new point release is available that addresses this issue at this time.</p> https://vulnerability.circl.lu/vuln/cve-2017-1000369 https://vulnerability.circl.lu/vuln/usn-3322-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: exim4, Ubuntu:16.04:LTS: exim4</p> <p>It was discovered that Exim did not properly deallocate memory when processing certain command line arguments. A local attacker could use this in conjunction with a vulnerability in the underlying kernel to possibly execute arbitrary code and gain administrative privileges.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: exim4, Ubuntu:16.04:LTS: exim4</p> <p>It was discovered that Exim did not properly deallocate memory when processing certain command line arguments. A local attacker could use this in conjunction with a vulnerability in the underlying kernel to possibly execute arbitrary code and gain administrative privileges.</p> https://vulnerability.circl.lu/vuln/usn-3322-1