CVE Catalog
CVE-2017-16943
CriticalSummary
The receive_msg function in the SMTP daemon in Exim 4.88 and 4.89 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via vectors involving BDAT commands.
Risk Assessment
An attacker can remotely take control of the system or cause it to become unavailable, which may lead to serious consequences for the organization.
Recommendation
It is recommended to upgrade to the latest version of Exim to mitigate this vulnerability and to monitor logs for potential attack attempts.
Original NVD description (English source)
The receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via vectors involving BDAT commands.