Exim: Local privilege escalation

Exim: Local privilege escalation A vulnerability in Exim may allow local users to gain root privileges. exim 2017-09-24 2017-09-24 622212 local 4.89-r1 4.89-r1

Exim is a message transfer agent (MTA) developed at the University of Cambridge for use on Unix systems connected to the Internet.

Exim supports the use of multiple “-p” command line arguments causing a memory leak. This could lead to a stack-clash in user-space and as result the attacker can, “clash” or “smash” the stack or another memory region, or “jump” over the stack guard-page.

A local attacker could obtain root privileges.

There is no known workaround at this time.

All Exim users should upgrade to the latest version:


      # emerge --sync
      # emerge --ask --oneshot --verbose ">=mail-mta/exim-4.89-r1"

CVE-2017-1000369 chrisadr chrisadr