CVE-2019-15846

Exim before 4.92.2 allows remote attackers to execute arbitrary code as root via a trailing backslash.

CVSS v3.0

9.8 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

35.74% chance of exploitation in the next 30 days, 98th percentile

Published

2019-09-06

Updated

2024-08-05

Proof-of-concept exploits (2)

• d3k4z/nmap-cve2019-158463★ · 2019-10-07
• synacktiv/Exim-CVE-2019-1584630★ · 2019-10-10

References

• CVE Record
• NVD entry

Related

• CVE-2018-6789
• CVE-2019-8942
• CVE-2020-27950
• CVE-2020-9289
• CVE-2021-1782
• CVE-2021-27246