GHSA-qf54-2qx8-3vcv
Record from GitHub Advisory Database · Published May 3, 2024
Exim Improper Neutralization of Special Elements Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Exim. Authentication is not required to exploit this vulnerability. The specific flaw exists within the smtp service, which listens on TCP port 25 by default. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17554.
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| libspf2 | Wolfi | 1.2.11-r1 |
| exim | Wolfi | 4.96.1-r0 |
| exim | Chainguard | 4.96.1-r0 |
| libspf2 | Chainguard | 1.2.11-r1 |
Risk scores
Affected products
| Vendor | Product | Versions |
|---|---|---|
| wolfi | libspf2 | 0 |
| wolfi | exim | 0 |
| chainguard | exim | 0 |
| chainguard | libspf2 | 0 |
Timeline
- May 3, 2024 CVE Published
- Apr 10, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-qf54-2qx8-3vcv
vulnetix vdb fixes GHSA-qf54-2qx8-3vcvOr with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-qf54-2qx8-3vcv/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart