CVE-2019-15846
CRITICAL 9.8EPSS 35.7%
Exim before 4.92.2 allows remote attackers to execute arbitrary code as root via a trailing backslash.
- CVSS v3.0 NVD
- 9.8 CRITICAL
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS v2.0 NVD
- 10.0 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C - EPSS
- 35.74% chance of exploitation in the next 30 days, 98th percentile
- Published
- 2019-09-06
- Updated
- 2024-08-05
Proof-of-concept exploits (2)
- d3k4z/nmap-cve2019-158463★ · 2019-10-07
- synacktiv/Exim-CVE-2019-1584630★ · 2019-10-10
Security advisories
- http://exim.org/static/doc/security/CVE-2019-15846.txt
- https://lists.debian.org/debian-lts-announce/2019/09/msg00004.html
- https://seclists.org/bugtraq/2019/Sep/13
- https://www.openwall.com/lists/oss-security/2019/09/06/1
- https://usn.ubuntu.com/4124-1
- https://usn.ubuntu.com/4124-2
- https://www.kb.cert.org/vuls/id/672565