Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
E enabled, and a normal top-down address allocation strategy, load_elf_binary() will attempt to map a PIE binary into an address range immediately below mm->mmap_base. Unfortunately, load_elf_ binary() does not take account of the need to allocate sufficient space for the entire binary which means that, while the first PT_LOAD segment is mapped below mm->mmap_base, the subsequent PT_LOAD segment(s) end up being mapped above mm->mmap_base into the are that is supposed to be the "gap" between the stack and the binary. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2017:2798 - https://access.redhat.com/errata/RHSA-
ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2017:2798 - https://access.redhat.com/errata/RHSA-2017:2795 - http://www.securitytracker.com/id/1039434 - https://access.redhat.com/errata/RHSA-2017:2801 - https://access.redhat.com/errata/RHSA-2017:2796 - http://www.securityfocus.com/bid/101010 - https://access.redhat.com/errata/RHSA-2017:2799 - https://access.redhat.com/errata/RHSA-2017:2794 - https://access.redhat.com/errata/RHSA-2017:2793 - https://access.redhat.com/errata/RHSA-2017:2797 - https://access.redhat.com/errata/RHSA-2017:2802 - https://www.qualys.com/2017/09/26/cve-2017-1000253/cve-2017-1000253.txt - https://access.redhat.com/errata/RHSA-2017:2800
CVE ID: CVE-2017-1000254 State: PUBLISHED Published: 2017-10-06T13:00:00 Last Updated: 2024-08-05T22:00:39.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: libcurl may read outside of a heap allocated buffer when doing FTP. When libcurl connects to an FTP server and successfully logs in (anonymous or not), it asks the server for the current directory with the `PWD` command. The server then responds with a 257 response containing the path, inside double quotes. The returned path name is then kept by libcurl for subsequent uses. Due to a flaw in the string parser for this directory name, a directory name passed like this but without a closing double quote would lead to libcurl n
er for this directory name, a directory name passed like this but without a closing double quote would lead to libcurl not adding a trailing NUL byte to the buffer holding the name. When libcurl would then later access the string, it could read beyond the allocated heap buffer and crash or wrongly access data beyond the buffer, thinking it was part of the path. A malicious server could abuse this fact and effectively prevent libcurl-based clients to work with it - the PWD command is always issued on new FTP connections and the mistake has a high chance of causing a segfault. The simple fact that this has issue remained undiscovered for this long could suggest that malformed PWD responses are
. The simple fact that this has issue remained undiscovered for this long could suggest that malformed PWD responses are rare in benign servers. We are not aware of any exploit of this flaw. This bug was introduced in commit [415d2e7cb7](https://github.com/curl/curl/commit/415d2e7cb7), March 2005. In libcurl version 7.56.0, the parser always zero terminates the string but also rejects it if not terminated properly with a final double quote. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201712-04 - https://access.redhat.com/errata/RHSA-2018:3558 - https://support.apple.com/HT208331 - http://www.securitytracker.com/id/1039509 - https://curl.h
/errata/RHSA-2018:3558 - https://support.apple.com/HT208331 - http://www.securitytracker.com/id/1039509 - https://curl.haxx.se/673d0cd8.patch - https://curl.haxx.se/docs/adv_20171004.html - https://access.redhat.com/errata/RHSA-2018:2486 - http://www.debian.org/security/2017/dsa-3992 - http://www.securityfocus.com/bid/101115 - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
CVE ID: CVE-2017-1000255 State: PUBLISHED Published: 2017-10-30T20:00:00 Last Updated: 2024-08-05T22:00:39.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Linux running on PowerPC hardware (Power8 or later) a user process can craft a signal frame and then do a sigreturn so that the kernel will take an exception (interrupt), and use the r1 value *from the signal frame* as the kernel stack pointer. As part of the exception entry the content of the signal frame is written to the kernel stack, allowing an attacker to overwrite arbitrary locations with arbitrary values. The exception handling does produce an oops, and a panic if panic_on_oops=1, but only after kernel memory has
ry values. The exception handling does produce an oops, and a panic if panic_on_oops=1, but only after kernel memory has been over written. This flaw was introduced in commit: "5d176f751ee3 (powerpc: tm: Enable transactional memory (TM) lazily for userspace)" which was merged upstream into v4.9-rc1. Please note that kernels built with CONFIG_PPC_TRANSACTIONAL_MEM=n are not vulnerable. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:0654 - https://access.redhat.com/security/cve/CVE-2017-1000255 - http://www.securityfocus.com/bid/101264
CVE ID: CVE-2017-1000256 State: PUBLISHED Published: 2017-10-31T15:00:00 Last Updated: 2024-08-05T22:00:39.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: libvirt version 2.3.0 and later is vulnerable to a bad default configuration of "verify-peer=no" passed to QEMU by libvirt resulting in a failure to validate SSL/TLS certificates by default. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/libvirt-announce/2017-October/msg00001.html - https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1556251.html - http://www.debian.org/security/2017/dsa-4003 - https://access.redhat.com/security/cve/CVE-2017-1000256
CVE ID: CVE-2017-1000257 State: PUBLISHED Published: 2017-10-31T21:00:00 Last Updated: 2024-08-05T22:00:39.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: An IMAP FETCH response line indicates the size of the returned data, in number of bytes. When that response says the data is zero bytes, libcurl would pass on that (non-existing) data with a pointer and the size (zero) to the deliver-data function. libcurl's deliver-data function treats zero as a magic number and invokes strlen() on the data to figure out the length. The strlen() is called on a heap based buffer that might not be zero terminated so libcurl might read beyond the end of it into whatever memory lies after (or
buffer that might not be zero terminated so libcurl might read beyond the end of it into whatever memory lies after (or just crash) and then deliver that to the application as if it was actually downloaded. Additional Analyst Notes: - CVE Program Container: References: - https://curl.haxx.se/docs/adv_20171023.html - https://access.redhat.com/errata/RHSA-2017:3263 - https://security.gentoo.org/glsa/201712-04 - http://www.securitytracker.com/id/1039644 - https://access.redhat.com/errata/RHSA-2018:3558 - http://www.securityfocus.com/bid/101519 - http://www.debian.org/security/2017/dsa-4007 - https://access.redhat.com/errata/RHSA-2018:2486
CVE ID: CVE-2017-1000353 State: PUBLISHED Published: 2018-01-29T17:00:00.000Z Last Updated: 2025-10-21T23:45:56.725Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an unauthenticated remote code execution. An unauthenticated remote code execution vulnerability allowed attackers to transfer a serialized Java `SignedObject` object to the Jenkins CLI, that would be deserialized using a new `ObjectInputStream`, bypassing the existing blacklist-based protection mechanism. We're fixing this issue by adding `SignedObject` to the blacklist. We're also backporting the new HTTP CLI protocol from Jenkins 2
ng this issue by adding `SignedObject` to the blacklist. We're also backporting the new HTTP CLI protocol from Jenkins 2.54 to LTS 2.46.2, and deprecating the remoting-based (i.e. Java serialization) CLI protocol, disabling it by default. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/41965/ - http://www.securityfocus.com/bid/98056 - https://www.oracle.com/security-alerts/cpuapr2022.html - https://jenkins.io/security/advisory/2017-04-26/ - http://packetstormsecurity.com/files/159266/Jenkins-2.56-CLI-Deserialization-Code-Execution.html
CVE ID: CVE-2017-1000354 State: PUBLISHED Published: 2018-01-29T17:00:00 Last Updated: 2024-08-05T22:00:39.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to a login command which allowed impersonating any Jenkins user. The `login` command available in the remoting-based CLI stored the encrypted user name of the successfully authenticated user in a cache file used to authenticate further commands. Users with sufficient permission to create secrets in Jenkins, and download their encrypted values (e.g. with Job/Configure permission), were able to impersonate any other Jenkins user on the same ins
r encrypted values (e.g. with Job/Configure permission), were able to impersonate any other Jenkins user on the same instance. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98065 - https://jenkins.io/security/advisory/2017-04-26/
CVE ID: CVE-2017-1000355 State: PUBLISHED Published: 2018-01-29T17:00:00 Last Updated: 2024-08-05T22:00:40.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an XStream: Java crash when trying to instantiate void/Void. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98066 - https://jenkins.io/security/advisory/2017-04-26/
CVE ID: CVE-2017-1000356 State: PUBLISHED Published: 2018-01-29T17:00:00 Last Updated: 2024-08-05T22:00:39.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an issue in the Jenkins user database authentication realm: create an account if signup is enabled; or create an account if the victim is an administrator, possibly deleting the existing default admin user in the process and allowing a wide variety of impacts. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98062 - https://jenkins.io/security/advisory/2017-04-26/
CVE ID: CVE-2017-1000357 State: PUBLISHED Published: 2017-04-24T16:00:00 Last Updated: 2024-08-05T22:00:41.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: Denial of Service attack when the switch rejects to receive packets from the controller. Component: This vulnerability affects OpenDaylight odl-l2switch-switch, which is the feature responsible for the OpenFlow communication. Version: OpenDaylight versions 3.3 (Lithium-SR3), 3.4 (Lithium-SR4), 4.0 (Beryllium), 4.1 (Beryllium-SR1), 4.2 (Beryllium-SR2), and 4.4 (Beryllium-SR4) are affected by this flaw. Java version is openjdk version 1.8.0_91. Additional Analyst Notes: - CVE Program Container: References: - https://aaltodoc.
version is openjdk version 1.8.0_91. Additional Analyst Notes: - CVE Program Container: References: - https://aaltodoc.aalto.fi/bitstream/handle/123456789/21584/master_Bidaj_Andi_2016.pdf
CVE ID: CVE-2017-1000358 State: PUBLISHED Published: 2017-04-24T16:00:00Z Last Updated: 2024-09-16T22:20:58.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: Controller throws an exception and does not allow user to add subsequent flow for a particular switch. Component: OpenDaylight odl-restconf feature contains this flaw. Version: OpenDaylight 4.0 is affected by this flaw. Additional Analyst Notes: - CVE Program Container: References: - https://aaltodoc.aalto.fi/bitstream/handle/123456789/21584/master_Bidaj_Andi_2016.pdf
CVE ID: CVE-2017-1000359 State: PUBLISHED Published: 2017-04-24T16:00:00Z Last Updated: 2024-09-17T01:06:53.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: Java out of memory error and significant increase in resource consumption. Component: OpenDaylight odl-mdsal-xsql is vulnerable to this flaw. Version: The tested versions are OpenDaylight 3.3 and 4.0. Additional Analyst Notes: - CVE Program Container: References: - https://aaltodoc.aalto.fi/bitstream/handle/123456789/21584/master_Bidaj_Andi_2016.pdf
CVE ID: CVE-2017-1000360 State: PUBLISHED Published: 2017-04-24T16:00:00Z Last Updated: 2024-09-17T03:48:52.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: StreamCorruptedException and NullPointerException in OpenDaylight odl-mdsal-xsql. Controller launches exceptions in the console. Component: OpenDaylight odl-mdsal-xsql is vulnerable to this flaw. Version: The tested versions are OpenDaylight 3.3 and 4.0. Additional Analyst Notes: - CVE Program Container: References: - https://aaltodoc.aalto.fi/bitstream/handle/123456789/21584/master_Bidaj_Andi_2016.pdf
CVE ID: CVE-2017-1000361 State: PUBLISHED Published: 2017-04-24T16:00:00Z Last Updated: 2024-09-17T00:51:12.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: DOMRpcImplementationNotAvailableException when sending Port-Status packets to OpenDaylight. Controller launches exceptions and consumes more CPU resources. Component: OpenDaylight is vulnerable to this flaw. Version: The tested versions are OpenDaylight 3.3 and 4.0. Additional Analyst Notes: - CVE Program Container: References: - https://aaltodoc.aalto.fi/bitstream/handle/123456789/21584/master_Bidaj_Andi_2016.pdf
CVE ID: CVE-2017-1000362 State: PUBLISHED Published: 2017-07-13T20:00:00 Last Updated: 2024-08-05T22:00:40.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: The re-key admin monitor was introduced in Jenkins 1.498 and re-encrypted all secrets in JENKINS_HOME with a new key. It also created a backup directory with all old secrets, and the key used to encrypt them. These backups were world-readable and not removed afterwards. Jenkins now deletes the backup directory, if present. Upgrading from before 1.498 will no longer create a backup directory. Administrators relying on file access permissions in their manually created backups are advised to check them for the directory $JENKI
relying on file access permissions in their manually created backups are advised to check them for the directory $JENKINS_HOME/jenkins.security.RekeySecretAdminMonitor/backups, and delete it if present. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2017-02-01/
CVE ID: CVE-2017-1000363 State: PUBLISHED Published: 2017-07-13T20:00:00 Last Updated: 2024-08-05T22:00:40.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linux drivers/char/lp.c Out-of-Bounds Write. Due to a missing bounds check, and the fact that parport_ptr integer is static, a 'secure boot' kernel command line adversary (can happen due to bootloader vulns, e.g. Google Nexus 6's CVE-2016-10277, where due to a vulnerability the adversary has partial control over the command line) can overflow the parport_nr array in the following code, by appending many (>LP_NO) 'lp=none' arguments to the command line. Additional Analyst Notes: - CVE Program Container: References: - http://
LP_NO) 'lp=none' arguments to the command line. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98651 - https://alephsecurity.com/vulns/aleph-2017023 - http://www.debian.org/security/2017/dsa-3945
CVE ID: CVE-2017-1000364 State: PUBLISHED Published: 2017-06-19T16:00:00 Last Updated: 2024-08-05T22:00:41.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be "jumped" over (the stack guard page is bypassed), this affects Linux Kernel versions 4.11.5 and earlier (the stackguard page was introduced in 2010). Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1491 - https://access.redhat.com/security/cve/CVE-2017-1000364 - https://access.redhat.com/errata/RHSA-2017:1486 - https://access
tps://access.redhat.com/security/cve/CVE-2017-1000364 - https://access.redhat.com/errata/RHSA-2017:1486 - https://access.redhat.com/errata/RHSA-2017:1489 - https://access.redhat.com/errata/RHSA-2017:1490 - https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt - https://www.exploit-db.com/exploits/45625/ - https://access.redhat.com/errata/RHSA-2017:1482 - https://access.redhat.com/errata/RHSA-2017:1647 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03800en_us - https://access.redhat.com/errata/RHSA-2017:1616 - https://access.redhat.com/errata/RHSA-2017:1712 - https://access.redhat.com/errata/RHSA-2017:1483 - https://access.redhat.com/errata/RHSA-
hat.com/errata/RHSA-2017:1712 - https://access.redhat.com/errata/RHSA-2017:1483 - https://access.redhat.com/errata/RHSA-2017:1487 - http://www.securityfocus.com/bid/99130 - https://www.suse.com/support/kb/doc/?id=7020973 - https://access.redhat.com/errata/RHSA-2017:1567 - https://access.redhat.com/errata/RHSA-2017:1484 - https://www.suse.com/security/cve/CVE-2017-1000364/ - http://www.debian.org/security/2017/dsa-3886 - http://www.securitytracker.com/id/1038724 - https://kc.mcafee.com/corporate/index?page=content&id=SB10205 - https://access.redhat.com/errata/RHSA-2017:1485 - https://access.redhat.com/errata/RHSA-2017:1488 - https://kc.mcafee.com/corporate/index?page=content&id=SB10207
CVE ID: CVE-2017-1000365 State: PUBLISHED Published: 2017-06-19T16:00:00 Last Updated: 2024-08-05T22:00:39.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux Kernel imposes a size restriction on the arguments and environmental strings passed through RLIMIT_STACK/RLIM_INFINITY (1/4 of the size), but does not take the argument and environment pointers into account, which allows attackers to bypass this limitation. This affects Linux Kernel versions 4.11.5 and earlier. It appears that this feature was introduced in the Linux Kernel version 2.6.23. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3927 - http://www.sec
onal Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3927 - http://www.securityfocus.com/bid/99156 - https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt - http://www.debian.org/security/2017/dsa-3945 - https://access.redhat.com/security/cve/CVE-2017-1000365
CVE ID: CVE-2017-1000366 State: PUBLISHED Published: 2017-06-19T16:00:00 Last Updated: 2024-08-05T22:00:39.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code execution. Please note that additional hardening changes have been made to glibc to prevent manipulation of stack and heap memory but these issues are not directly exploitable, as such they have not been given a CVE. This affects glibc 2.25 and earlier. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualys.com/2017/06/19
ibc 2.25 and earlier. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt - http://www.securitytracker.com/id/1038712 - https://www.exploit-db.com/exploits/42275/ - https://access.redhat.com/errata/RHSA-2017:1712 - https://www.suse.com/security/cve/CVE-2017-1000366/ - https://access.redhat.com/errata/RHSA-2017:1479 - https://access.redhat.com/errata/RHSA-2017:1480 - http://www.securityfocus.com/bid/99127 - https://www.exploit-db.com/exploits/42276/ - https://www.suse.com/support/kb/doc/?id=7020973 - https://access.redhat.com/errata/RHSA-2017:1567 - https://www.exploit-db.com/exploits/42274/ - https://access.redhat.com
https://access.redhat.com/errata/RHSA-2017:1567 - https://www.exploit-db.com/exploits/42274/ - https://access.redhat.com/security/cve/CVE-2017-1000366 - https://access.redhat.com/errata/RHSA-2017:1481 - http://www.debian.org/security/2017/dsa-3887 - https://security.gentoo.org/glsa/201706-19 - https://kc.mcafee.com/corporate/index?page=content&id=SB10205 - http://seclists.org/fulldisclosure/2019/Sep/7 - https://seclists.org/bugtraq/2019/Sep/7 - http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html
CVE ID: CVE-2017-1000367 State: PUBLISHED Published: 2017-06-05T00:00:00 Last Updated: 2024-08-05T22:00:39.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process_ttyname() function resulting in information disclosure and command execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-3304-1 - https://security.gentoo.org/glsa/201705-15 - http://www.securityfocus.com/bid/98745 - https://www.sudo.ws/alerts/linux_tty.html - http://seclists.org/fulldisclosure/2017/Jun/3 - https://lists.fedoraproject.org/archives/list/pac
lerts/linux_tty.html - http://seclists.org/fulldisclosure/2017/Jun/3 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VXEXC4NNIG2QOZY6N2YUK246KI3D3UQO/ - https://access.redhat.com/errata/RHSA-2017:1382 - http://packetstormsecurity.com/files/142783/Sudo-get_process_ttyname-Race-Condition.html - http://lists.opensuse.org/opensuse-security-announce/2017-05/msg00077.html - http://lists.opensuse.org/opensuse-security-announce/2017-05/msg00078.html - http://www.debian.org/security/2017/dsa-3867 - http://lists.opensuse.org/opensuse-security-announce/2017-05/msg00079.html - https://www.exploit-db.com/exploits/42183/ - http://www.openwall.com/lists/os
-security-announce/2017-05/msg00079.html - https://www.exploit-db.com/exploits/42183/ - http://www.openwall.com/lists/oss-security/2017/05/30/16 - https://access.redhat.com/errata/RHSA-2017:1381 - http://www.securitytracker.com/id/1038582 - http://www.openwall.com/lists/oss-security/2022/12/22/5 - http://www.openwall.com/lists/oss-security/2022/12/22/6
CVE ID: CVE-2017-1000368 State: PUBLISHED Published: 2017-06-05T16:00:00 Last Updated: 2024-08-05T22:00:41.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: Todd Miller's sudo version 1.8.20p1 and earlier is vulnerable to an input validation (embedded newlines) in the get_process_ttyname() function resulting in information disclosure and command execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.sudo.ws/alerts/linux_tty.html - https://security.gentoo.org/glsa/201710-04 - http://www.securityfocus.com/bid/98838 - https://access.redhat.com/errata/RHSA-2017:1574 - https://kc.mcafee.com/corporate/index?page=content&id=SB10205 - https://usn.ubuntu
ss.redhat.com/errata/RHSA-2017:1574 - https://kc.mcafee.com/corporate/index?page=content&id=SB10205 - https://usn.ubuntu.com/3968-1/ - https://usn.ubuntu.com/3968-2/
CVE ID: CVE-2017-1000369 State: PUBLISHED Published: 2017-06-19T16:00:00 Last Updated: 2024-08-05T22:00:41.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exim supports the use of multiple "-p" command line arguments which are malloc()'ed and never free()'ed, used in conjunction with other issues allows attackers to cause arbitrary code execution. This affects exim version 4.89 and earlier. Please note that at this time upstream has released a patch (commit 65e061b76867a9ea7aeeb535341b790b90ae6c21), but it is not known if a new point release is available that addresses this issue at this time. Additional Analyst Notes: - CVE Program Container: References: - https://github.com