[Git][security-tracker-team/security-tracker][master] Restore CVE-2023-42115

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
de35b247 by Salvatore Bonaccorso at 2024-10-29T19:19:50+01:00
Restore CVE-2023-42115

This was caused from a fallout of 98b9b7de9a0c ("Add some upstream tag
meta information to upstream commits") and then removed when reserving
the DLA for xorg-server in 9432b3045d5f ("Reserve DLA-3940-1 for
xorg-server").

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -98618,6 +98618,14 @@ CVE-2023-42116 (Exim SMTP Challenge Stack-based Buffer Overflow Remote Code Exec
 	NOTE: https://exim.org/static/doc/security/CVE-2023-zdi.txt
 CVE-2023-42115 (Exim AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability. Thi ...)
 	{DSA-5512-1}
+	- exim4 4.97~RC1-2
+	[buster] - exim4 <not-affected> (External authenticator support was introduced later)
+	NOTE: https://www.zerodayinitiative.com/advisories/ZDI-23-1469/
+	NOTE: https://bugs.exim.org/show_bug.cgi?id=2999
+	NOTE: https://git.exim.org/exim.git/log/refs/heads/exim-4.96%20security/exim.git/commit/955f1203c15be96fa84b5331fa2a5cb2e556b9a9 (exim-4.96.1)
+	NOTE: https://www.openwall.com/lists/oss-security/2023/09/29/5
+	NOTE: https://www.openwall.com/lists/oss-security/2023/10/01/4
+	NOTE: https://exim.org/static/doc/security/CVE-2023-zdi.txt
 CVE-2023-42114 (Exim NTLM Challenge Out-Of-Bounds Read Information Disclosure Vulnerab ...)
 	{DSA-5512-1 DLA-3599-1}
 	- exim4 4.97~RC1-2



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/de35b247448c29d541b5295a41d2bba676fdf367

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/de35b247448c29d541b5295a41d2bba676fdf367
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20241029/b619e05f/attachment.htm>