Exim before 4.97.1 allows SMTP smuggling in certain PIPELINING/CHUNKING configurations. Remote attackers can use a published exploitation te

• CWE-345

• exim exim< 4.97.1
  other
• fedoraproject extra_packages_for_enterprise_linux
  linux
• fedoraproject extra_packages_for_enterprise_linux
  linux
• fedoraproject extra_packages_for_enterprise_linux
  linux
• fedoraproject fedora
  other
• fedoraproject fedora
  other
• debian debian_linux
  linux

• exim exim< 4.97.1cpe:2.3:a:exim:exim:*:*:*:*:*:*:*:*
• fedoraproject extra_packages_for_enterprise_linux 7.0cpe:2.3:a:fedoraproject:extra_packages_for_enterprise_linux:7.0:*:*:*:*:*:*:*
• fedoraproject extra_packages_for_enterprise_linux 8.0cpe:2.3:a:fedoraproject:extra_packages_for_enterprise_linux:8.0:*:*:*:*:*:*:*
• fedoraproject extra_packages_for_enterprise_linux 9.0cpe:2.3:a:fedoraproject:extra_packages_for_enterprise_linux:9.0:*:*:*:*:*:*:*
• fedoraproject fedora 38cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
• fedoraproject fedora 39cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
• debian debian_linux 10.0cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

• http://www.openwall.com/lists/oss-security/2023/12/24/1

  Mailing ListThird Party Advisory
• http://www.openwall.com/lists/oss-security/2023/12/25/1

  Mailing ListThird Party Advisory
• http://www.openwall.com/lists/oss-security/2023/12/29/2

  Mailing ListMitigationThird Party Advisory
• http://www.openwall.com/lists/oss-security/2024/01/01/1

  Mailing ListThird Party Advisory
• http://www.openwall.com/lists/oss-security/2024/01/01/2

  Mailing ListThird Party Advisory
• http://www.openwall.com/lists/oss-security/2024/01/01/3

  Mailing ListThird Party Advisory
• https://bugs.exim.org/show_bug.cgi?id=3063

  Issue TrackingVendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2255852

  Issue TrackingThird Party Advisory
• https://exim.org/static/doc/security/CVE-2023-51766.txt

  Broken Link
• https://fahrplan.events.ccc.de/congress/2023/fahrplan/events/11782.html

  Technical Description
• https://git.exim.org/exim.git/commit/5bb786d5ad568a88d50d15452aacc8404047e5ca

  Patch
• https://git.exim.org/exim.git/commit/cf1376206284f2a4f11e32d931d4aade34c206c5

  Patch
• https://github.com/Exim/exim/blob/master/doc/doc-txt/cve-2023-51766

  MitigationVendor Advisory
• https://lists.debian.org/debian-lts-announce/2024/01/msg00002.html

  Mailing ListThird Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ORN7OKEQPPBKUHYRQ6LR5PSNBQVDHAWB/

  Mailing ListThird Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QPDWHJPABVJCXDSNELSSVTIVAJU2MDUQ/

  Mailing ListThird Party Advisory
• https://lwn.net/Articles/956533/

  Third Party Advisory
• https://sec-consult.com/blog/detail/smtp-smuggling-spoofing-e-mails-worldwide/

  Technical DescriptionThird Party Advisory
• https://www.openwall.com/lists/oss-security/2023/12/23/2

  Issue TrackingMailing ListThird Party Advisory
• https://www.youtube.com/watch?v=V8KPV96g1To

  Exploit
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ORN7OKEQPPBKUHYRQ6LR5PSNBQVDHAWB/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QPDWHJPABVJCXDSNELSSVTIVAJU2MDUQ/

링크 내용 불러오는 중…