CVE-2017-16944 — HIGH (7.5)

Vulnerability Description

The receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89 allows remote attackers to cause a denial of service (infinite loop and stack exhaustion) via vectors involving BDAT commands and an improper check for a '.' character signifying the end of the content, related to the bdat_getc function.

CVSS Score

7.5

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

NONE

Availability

HIGH

Affected Products

Vendor	Product	Versions
Exim	Exim	4.88
Debian	Debian Linux	9.0

Related Weaknesses (CWE)

CWE-835

References

http://openwall.com/lists/oss-security/2017/11/25/1Mailing List
http://openwall.com/lists/oss-security/2017/11/25/2Mailing List
http://openwall.com/lists/oss-security/2017/11/25/3Mailing List
http://www.openwall.com/lists/oss-security/2021/05/04/7
http://www.securitytracker.com/id/1039873Third Party AdvisoryVDB Entry
https://bugs.exim.org/show_bug.cgi?id=2201ExploitIssue Tracking
https://lists.exim.org/lurker/message/20171125.034842.d1d75cac.en.htmlMailing List
https://www.debian.org/security/2017/dsa-4053Third Party Advisory
https://www.exploit-db.com/exploits/43184/Third Party AdvisoryVDB Entry
http://openwall.com/lists/oss-security/2017/11/25/1Mailing List
http://openwall.com/lists/oss-security/2017/11/25/2Mailing List
http://openwall.com/lists/oss-security/2017/11/25/3Mailing List
http://www.openwall.com/lists/oss-security/2021/05/04/7
http://www.securitytracker.com/id/1039873Third Party AdvisoryVDB Entry
https://bugs.exim.org/show_bug.cgi?id=2201ExploitIssue Tracking

FAQ

What is CVE-2017-16944?

CVE-2017-16944 is a vulnerability with a CVSS score of 7.5 (HIGH). The receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89 allows remote attackers to cause a denial of service (infinite loop and stack exhaustion) via vectors involving BDAT comm...

How severe is CVE-2017-16944?

CVE-2017-16944 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-16944?

Check the references section above for vendor advisories and patch information. Affected products include: Exim Exim, Debian Debian Linux.