CVE-2019-10149 A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution.
CriticalCVSS 9.8
EPSS 100.0%
CISA KEV
added 2022-01-10 · due 2022-07-10
Exploited in the wild
Framework module
Public exploit
PoC
- Published
- Updated
- Exploit status
- Exploited in the wild (confirmed)
Description
A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution.
CISA Known Exploited Vulnerability
- Date added
- 2022-01-10
- Due date (FCEB)
- 2022-07-10
- Ransomware use
- Unknown
Required action
Apply updates per vendor instructions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/exim4(Debian:12) | < 4.92~RC3-1 | 4.92~RC3-1 |
| debian/exim4(Debian:13) | < 4.92~RC3-1 | 4.92~RC3-1 |
| debian/exim4(Debian:14) | < 4.92~RC3-1 | 4.92~RC3-1 |
| Exim | >= 4.87, <= 4.91 | No fix listed |
| Canonical Ubuntu Linux | = 18.04 | No fix listed |
| Canonical Ubuntu Linux | = 18.10 | No fix listed |
| debian linux | = 9.0 | No fix listed |
| alpine/exim(Alpine:v3.10) | >= 4.87, < 4.92-r0 | 4.92-r0 |
| alpine/exim(Alpine:v3.11) | >= 4.87, < 4.92-r0 | 4.92-r0 |
| alpine/exim(Alpine:v3.12) | >= 4.87, < 4.92-r0 | 4.92-r0 |
| alpine/exim(Alpine:v3.13) | >= 4.87, < 4.92-r0 | 4.92-r0 |
| alpine/exim(Alpine:v3.14) | >= 4.87, < 4.92-r0 | 4.92-r0 |
| alpine/exim(Alpine:v3.15) | >= 4.87, < 4.92-r0 | 4.92-r0 |
| alpine/exim(Alpine:v3.16) | >= 4.87, < 4.92-r0 | 4.92-r0 |
| alpine/exim(Alpine:v3.17) | >= 4.87, < 4.92-r0 | 4.92-r0 |
| alpine/exim(Alpine:v3.18) | >= 4.87, < 4.92-r0 | 4.92-r0 |
| alpine/exim(Alpine:v3.19) | >= 4.87, < 4.92-r0 | 4.92-r0 |
| alpine/exim(Alpine:v3.20) | >= 4.87, < 4.92-r0 | 4.92-r0 |
| alpine/exim(Alpine:v3.21) | >= 4.87, < 4.92-r0 | 4.92-r0 |
| alpine/exim(Alpine:v3.22) | >= 4.87, < 4.92-r0 | 4.92-r0 |
| alpine/exim(Alpine:v3.23) | >= 4.87, < 4.92-r0 | 4.92-r0 |
| alpine/exim(Alpine:v3.24) | >= 4.87, < 4.92-r0 | 4.92-r0 |
| alpine/exim(Alpine:v3.8) | >= 4.87, < 4.91-r2 | 4.91-r2 |
| alpine/exim(Alpine:v3.9) | >= 4.87, < 4.92-r0 | 4.92-r0 |
| Exim | = 4.92 | No fix listed |
References
- Debian Security Tracker CVE-2019-10149 vendor-advisory
- openSUSE-SU-2019:1524 mailing-list third-party-advisory vendor-advisory
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 20190611 The Return of the WIZard: RCE in Exim (CVE-2019-10149) mailing-list third-party-advisory
- [oss-security] 20190605 Re: CVE-2019-10149: Exim 4.87 to 4.91: possible remote exploit mailing-list third-party-advisory
- [oss-security] 20190605 Re: CVE-2019-10149: Exim 4.87 to 4.91: possible remote exploit mailing-list patch third-party-advisory
- [oss-security] 20190605 Re: CVE-2019-10149: Exim 4.87 to 4.91: possible remote exploit exploit mailing-list
- [oss-security] 20190606 Re: CVE-2019-10149: Exim 4.87 to 4.91: possible remote exploit exploit mailing-list third-party-advisory
- [oss-security] 20190725 Re: Statistics for distros lists updated for 2019Q2 mailing-list third-party-advisory
- [oss-security] 20190725 Re: Statistics for distros lists updated for 2019Q2 mailing-list third-party-advisory
- [oss-security] 20190726 Re: Statistics for distros lists updated for 2019Q2 mailing-list third-party-advisory
- [oss-security] 20210504 21Nails: Multiple vulnerabilities in Exim mailing-list third-party-advisory
- 108679 broken-link third-party-advisory vdb-entry
- bugzilla.redhat.com issue-tracking third-party-advisory
- 20190605 [SECURITY] [DSA 4456-1] exim4 security update mailing-list third-party-advisory
- GLSA-201906-01 third-party-advisory vendor-advisory
- USN-4010-1 third-party-advisory vendor-advisory
- DSA-4456 third-party-advisory vendor-advisory
- www.exim.org vendor-advisory
- www.cisa.gov government-resource us-government-resource
- security.alpinelinux.org vendor-advisory