onyx --cves cve-2012-5671
CVE-2012-5671
- score
- <0.1
- cvss
- 6.8
- epss
- 8.4%
- published
- 2012-10-31
- kev added
- 2013-02-21
- first seen
Exim 4.70 through 4.80 contains a heap-based buffer overflow caused by the dkim_exim_query_dns_txt function in dkim.c, letting remote attackers execute arbitrary code via malicious DNS responses, exploit requires DKIM support enabled and specific ACL settings.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Added to CISA KEV
- Tracked by Onyx
Weaknesses
References 16
- https://isc.sans.edu/diary/SSHD+rootkit+in+the+wild/15229
- http://www.debian.org/security/2012/dsa-2566
- http://www.securityfocus.com/bid/56285
- http://www.ubuntu.com/usn/USN-1618-1
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79615
- http://secunia.com/advisories/51098
- http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090963.html
- http://secunia.com/advisories/51115
- https://lists.exim.org/lurker/message/20121026.080330.74b9147b.en.html
- http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090900.html
- http://osvdb.org/86616
- http://secunia.com/advisories/51153
- http://secunia.com/advisories/51155
- http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091664.html
- http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00018.html
- http://www.openwall.com/lists/oss-security/2012/10/26/5