UBUNTU-CVE-2022-3559

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2022-3559

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-3559.json

JSON Data

https://api.test.osv.dev/v1/vulns/UBUNTU-CVE-2022-3559

Related

Published

2022-10-17T18:15:00Z

Modified

2022-10-17T18:15:00Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

[none]

Details

A vulnerability was found in Exim and classified as problematic. This issue affects some unknown processing of the component Regex Handler. The manipulation leads to use after free. The name of the patch is 4e9ed49f8f12eb331b29bd5b6dc3693c520fddc2. It is recommended to apply a patch to fix this issue. The identifier VDB-211073 was assigned to this vulnerability.

References

Affected packages

Ubuntu:18.04:LTS / exim4

Package

Name: exim4
Purl: pkg:deb/ubuntu/exim4?arch=src?distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.90.1-1ubuntu1.10

Affected versions

4.*

4.89-5ubuntu1

4.89-9ubuntu1

4.89-9ubuntu2

4.89-9ubuntu3

4.89-9ubuntu4

4.90.1-1ubuntu1

4.90.1-1ubuntu1.1

4.90.1-1ubuntu1.2

4.90.1-1ubuntu1.3

4.90.1-1ubuntu1.4

4.90.1-1ubuntu1.5

4.90.1-1ubuntu1.8

4.90.1-1ubuntu1.9

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "binary_version": "4.90.1-1ubuntu1.10",
            "binary_name": "exim4"
        },
        {
            "binary_version": "4.90.1-1ubuntu1.10",
            "binary_name": "exim4-base"
        },
        {
            "binary_version": "4.90.1-1ubuntu1.10",
            "binary_name": "exim4-base-dbgsym"
        },
        {
            "binary_version": "4.90.1-1ubuntu1.10",
            "binary_name": "exim4-config"
        },
        {
            "binary_version": "4.90.1-1ubuntu1.10",
            "binary_name": "exim4-daemon-heavy"
        },
        {
            "binary_version": "4.90.1-1ubuntu1.10",
            "binary_name": "exim4-daemon-heavy-dbgsym"
        },
        {
            "binary_version": "4.90.1-1ubuntu1.10",
            "binary_name": "exim4-daemon-light"
        },
        {
            "binary_version": "4.90.1-1ubuntu1.10",
            "binary_name": "exim4-daemon-light-dbgsym"
        },
        {
            "binary_version": "4.90.1-1ubuntu1.10",
            "binary_name": "exim4-dev"
        },
        {
            "binary_version": "4.90.1-1ubuntu1.10",
            "binary_name": "eximon4"
        },
        {
            "binary_version": "4.90.1-1ubuntu1.10",
            "binary_name": "eximon4-dbgsym"
        }
    ]
}

Ubuntu:20.04:LTS / exim4

Package

Name: exim4
Purl: pkg:deb/ubuntu/exim4?arch=src?distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.93-13ubuntu1.7

Affected versions

4.*

4.92.1-1ubuntu3

4.92.1-1ubuntu4

4.93~RC2-1ubuntu1

4.93-9ubuntu1

4.93-11ubuntu1

4.93-12ubuntu1

4.93-13ubuntu1

4.93-13ubuntu1.1

4.93-13ubuntu1.5

4.93-13ubuntu1.6

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "binary_version": "4.93-13ubuntu1.7",
            "binary_name": "exim4"
        },
        {
            "binary_version": "4.93-13ubuntu1.7",
            "binary_name": "exim4-base"
        },
        {
            "binary_version": "4.93-13ubuntu1.7",
            "binary_name": "exim4-base-dbgsym"
        },
        {
            "binary_version": "4.93-13ubuntu1.7",
            "binary_name": "exim4-config"
        },
        {
            "binary_version": "4.93-13ubuntu1.7",
            "binary_name": "exim4-daemon-heavy"
        },
        {
            "binary_version": "4.93-13ubuntu1.7",
            "binary_name": "exim4-daemon-heavy-dbgsym"
        },
        {
            "binary_version": "4.93-13ubuntu1.7",
            "binary_name": "exim4-daemon-light"
        },
        {
            "binary_version": "4.93-13ubuntu1.7",
            "binary_name": "exim4-daemon-light-dbgsym"
        },
        {
            "binary_version": "4.93-13ubuntu1.7",
            "binary_name": "exim4-dev"
        },
        {
            "binary_version": "4.93-13ubuntu1.7",
            "binary_name": "eximon4"
        },
        {
            "binary_version": "4.93-13ubuntu1.7",
            "binary_name": "eximon4-dbgsym"
        }
    ]
}

Ubuntu:22.04:LTS / exim4

Package

Name: exim4
Purl: pkg:deb/ubuntu/exim4?arch=src?distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.95-4ubuntu2.2

Affected versions

4.*

4.94.2-7ubuntu2

4.95-2ubuntu2

4.95-4ubuntu1

4.95-4ubuntu2

4.95-4ubuntu2.1

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "binary_version": "4.95-4ubuntu2.2",
            "binary_name": "exim4"
        },
        {
            "binary_version": "4.95-4ubuntu2.2",
            "binary_name": "exim4-base"
        },
        {
            "binary_version": "4.95-4ubuntu2.2",
            "binary_name": "exim4-base-dbgsym"
        },
        {
            "binary_version": "4.95-4ubuntu2.2",
            "binary_name": "exim4-config"
        },
        {
            "binary_version": "4.95-4ubuntu2.2",
            "binary_name": "exim4-daemon-heavy"
        },
        {
            "binary_version": "4.95-4ubuntu2.2",
            "binary_name": "exim4-daemon-heavy-dbgsym"
        },
        {
            "binary_version": "4.95-4ubuntu2.2",
            "binary_name": "exim4-daemon-light"
        },
        {
            "binary_version": "4.95-4ubuntu2.2",
            "binary_name": "exim4-daemon-light-dbgsym"
        },
        {
            "binary_version": "4.95-4ubuntu2.2",
            "binary_name": "exim4-dev"
        },
        {
            "binary_version": "4.95-4ubuntu2.2",
            "binary_name": "eximon4"
        },
        {
            "binary_version": "4.95-4ubuntu2.2",
            "binary_name": "eximon4-dbgsym"
        }
    ]
}