CVE-2019-10149 KEV EXPLOIT
9.8
CRITICAL · CVSS 3.1 · EPSS 100% (pctl 100)
Patch first
On CISA KEV — known exploited in the wild, due 2022-07-10.
Description
A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution.
Scoring
| CVSS | 9.8 (CRITICAL, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 99.96% — more likely to be exploited than 100% of all CVEs |
| Weakness | CWE-78 |
| On CISA KEV | yes — remediate by 2022-07-10 |
| Public exploit | yes |
| Published | 2019-06-05 |
| Last modified | 2026-06-17 |
CISA KEV
| Name | Exim Mail Transfer Agent (MTA) Improper Input Validation |
|---|---|
| Added | 2022-01-10 |
| Due | 2022-07-10 |
| Vendor / product | Exim / Mail Transfer Agent (MTA) |
| Ransomware use | none reported |
Affected (3)
| Vendor | Product |
|---|---|
| canonical | ubuntu linux |
| debian | debian linux |
| exim | exim |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Exim 4.87 / 4.91 - Local Privilege Escalation (Metasploit) | 2019-08-26 |
| exploit-db | Exim 4.87 - 4.91 - Local Privilege Escalation | 2019-06-17 |
| exploit-db | Exim 4.87 < 4.91 - (Local / Remote) Command Execution | 2019-06-05 |
References
- http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00020.html
- http://packetstormsecurity.com/files/153218/Exim-4.9.1-Remote-Command-Execution.html
- http://packetstormsecurity.com/files/153312/Exim-4.91-Local-Privilege-Escalation.html
- http://packetstormsecurity.com/files/154198/Exim-4.91-Local-Privilege-Escalation.html
- http://seclists.org/fulldisclosure/2019/Jun/16
- http://www.openwall.com/lists/oss-security/2019/06/05/2
- http://www.openwall.com/lists/oss-security/2019/06/05/3
- http://www.openwall.com/lists/oss-security/2019/06/05/4
- http://www.openwall.com/lists/oss-security/2019/06/06/1
- http://www.openwall.com/lists/oss-security/2019/07/25/6
- http://www.openwall.com/lists/oss-security/2019/07/25/7
- http://www.openwall.com/lists/oss-security/2019/07/26/4
- http://www.openwall.com/lists/oss-security/2021/05/04/7
- http://www.securityfocus.com/bid/108679
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10149
- https://seclists.org/bugtraq/2019/Jun/5
- https://security.gentoo.org/glsa/201906-01
- https://usn.ubuntu.com/4010-1/
- https://www.debian.org/security/2019/dsa-4456
- https://www.exim.org/static/doc/security/CVE-2019-10149.txt
→ the Explorer · watch your stack · NVD