[3.6] exim: Privilege escalation via multiple memory leaks (CVE-2017-1000369)| ID: oval:org.secpod.oval:def:1800052 | Date: (C)2018-03-28 (M)2022-08-31 |
| Class: PATCH | Family: unix |
Exim supports the use of multiple "-p" command line arguments which are malloc"ed and never free"ed, used in conjunction with other issues allows attackers to cause arbitrary code execution. This affects exim version 4.89 and earlier. Please note that at this time upstream has released a patch , but it is not known if a new point release is available that addresses this issue at this time.
| Platform: |
| Alpine Linux 3.6 |
