Log in Start free

Actively exploited · Published Dec 14, 2010 · Assigned by redhat

CVE-2010-4344

Critical 9.8 Exploited

In plain English

A critical-severity out-of-bounds write in Exim from Exim. Attackers are actively exploiting it in the wild (listed by CISA on March 25, 2022). The chance it is exploited in the next 30 days is estimated at 71.7% (higher than 99.4% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit. Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)71.7%top 0.6% of all CVEs
Exploited in the wildYesCISA KEV since Mar 25, 2022
Attack tooling1Metasploit

CISA guidance

Apply updates per vendor instructions.

Federal agencies must remediate by Apr 15, 2022.

Official description

Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session that includes two MAIL commands in conjunction with a large message containing crafted headers, leading to improper rejection logging.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12exim44.70-1DEBIAN-CVE-2010-4344
Debian:13exim44.70-1DEBIAN-CVE-2010-4344
Debian:14exim44.70-1DEBIAN-CVE-2010-4344

Affected products (as reported)

VendorProductVersions
n/a n/a n/a

Weakness: CWE-787 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References