onyx --cves cve-2019-10149
CVE-2019-10149
- score
- <0.1
- cvss
- 9.8
- epss
- 100.0%
- published
- 2019-06-05
- kev added
- 2022-01-10
- first seen
Exim versions 4.87 to 4.91 contain a remote command execution caused by improper validation of recipient address in deliver_message() in /src/deliver.c, letting remote attackers execute arbitrary commands, exploit requires sending a crafted email.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Added to CISA KEV
- Tracked by Onyx
- Public PoC http://packetstormsecurity.com/files/153218/Exim-4.9.1-Remote-Command-Execution.html
Exploit availability
Weaknesses
References 24
- https://nvd.nist.gov/vuln/detail/CVE-2019-10149
- https://seclists.org/bugtraq/2019/Jun/5
- https://www.debian.org/security/2019/dsa-4456
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-10149
- http://www.openwall.com/lists/oss-security/2019/07/25/6
- https://services.google.com/fh/files/misc/apt44-unearthing-sandworm.pdf
- https://media.defense.gov/2020/May/28/2002306626/-1/-1/0/CSA%20Sandworm%20Actors%20Exploiting%20Vulnerability%20in%20Exim%20Transfer%20Agent%2020200528.pdf
- http://seclists.org/fulldisclosure/2019/Jun/16
- http://www.openwall.com/lists/oss-security/2019/06/05/2
- http://www.openwall.com/lists/oss-security/2019/06/05/4
- https://security.gentoo.org/glsa/201906-01
- https://usn.ubuntu.com/4010-1/
- https://www.exim.org/static/doc/security/CVE-2019-10149.txt
- http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00020.html
- http://packetstormsecurity.com/files/153218/Exim-4.9.1-Remote-Command-Execution.html
- http://packetstormsecurity.com/files/153312/Exim-4.91-Local-Privilege-Escalation.html
- http://www.openwall.com/lists/oss-security/2019/06/05/3
- http://www.openwall.com/lists/oss-security/2019/06/06/1
- http://www.openwall.com/lists/oss-security/2019/07/25/7
- http://www.openwall.com/lists/oss-security/2021/05/04/7
- https://blog.sonicwall.com/en-us/2019/12/top-cves-exploited-in-the-wild-in-the-year-2019/
- http://packetstormsecurity.com/files/154198/Exim-4.91-Local-Privilege-Escalation.html
- http://www.openwall.com/lists/oss-security/2019/07/26/4
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10149