A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution.
{ "availability": "No subscription required", "binaries": [ { "binary_name": "exim4", "binary_version": "4.86.2-2ubuntu2.3" }, { "binary_name": "exim4-base", "binary_version": "4.86.2-2ubuntu2.3" }, { "binary_name": "exim4-base-dbgsym", "binary_version": "4.86.2-2ubuntu2.3" }, { "binary_name": "exim4-config", "binary_version": "4.86.2-2ubuntu2.3" }, { "binary_name": "exim4-daemon-heavy", "binary_version": "4.86.2-2ubuntu2.3" }, { "binary_name": "exim4-daemon-heavy-dbg", "binary_version": "4.86.2-2ubuntu2.3" }, { "binary_name": "exim4-daemon-heavy-dbgsym", "binary_version": "4.86.2-2ubuntu2.3" }, { "binary_name": "exim4-daemon-light", "binary_version": "4.86.2-2ubuntu2.3" }, { "binary_name": "exim4-daemon-light-dbg", "binary_version": "4.86.2-2ubuntu2.3" }, { "binary_name": "exim4-daemon-light-dbgsym", "binary_version": "4.86.2-2ubuntu2.3" }, { "binary_name": "exim4-dbg", "binary_version": "4.86.2-2ubuntu2.3" }, { "binary_name": "exim4-dev", "binary_version": "4.86.2-2ubuntu2.3" }, { "binary_name": "eximon4", "binary_version": "4.86.2-2ubuntu2.3" }, { "binary_name": "eximon4-dbgsym", "binary_version": "4.86.2-2ubuntu2.3" } ], "ubuntu_priority": "medium" }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "exim4", "binary_version": "4.90.1-1ubuntu1.2" }, { "binary_name": "exim4-base", "binary_version": "4.90.1-1ubuntu1.2" }, { "binary_name": "exim4-base-dbgsym", "binary_version": "4.90.1-1ubuntu1.2" }, { "binary_name": "exim4-config", "binary_version": "4.90.1-1ubuntu1.2" }, { "binary_name": "exim4-daemon-heavy", "binary_version": "4.90.1-1ubuntu1.2" }, { "binary_name": "exim4-daemon-heavy-dbgsym", "binary_version": "4.90.1-1ubuntu1.2" }, { "binary_name": "exim4-daemon-light", "binary_version": "4.90.1-1ubuntu1.2" }, { "binary_name": "exim4-daemon-light-dbgsym", "binary_version": "4.90.1-1ubuntu1.2" }, { "binary_name": "exim4-dev", "binary_version": "4.90.1-1ubuntu1.2" }, { "binary_name": "eximon4", "binary_version": "4.90.1-1ubuntu1.2" }, { "binary_name": "eximon4-dbgsym", "binary_version": "4.90.1-1ubuntu1.2" } ], "ubuntu_priority": "medium" }