svn commit: r461413 - head/security/vuxml
Vsevolod Stakhov
vsevolod at FreeBSD.org
Sat Feb 10 19:29:24 UTC 2018
Author: vsevolod
Date: Sat Feb 10 19:29:23 2018
New Revision: 461413
URL: https://svnweb.freebsd.org/changeset/ports/461413
Log:
- Document CVE-2018-6789 in mail/exim
Security: 316b3c3e-0e98-11e8-8d41-97657151f8c2
Modified:
head/security/vuxml/vuln.xml
Modified: head/security/vuxml/vuln.xml
==============================================================================
--- head/security/vuxml/vuln.xml Sat Feb 10 18:58:59 2018 (r461412)
+++ head/security/vuxml/vuln.xml Sat Feb 10 19:29:23 2018 (r461413)
@@ -58,6 +58,32 @@ Notes:
* Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
-->
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
+ <vuln vid="316b3c3e-0e98-11e8-8d41-97657151f8c2">
+ <topic>exim -- a buffer overflow vulnerability, remote code execution</topic>
+ <affects>
+ <package>
+ <name>exim</name>
+ <range><lt>4.90.1</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>Exim developers report:</p>
+ <blockquote cite="INSERT URL HERE">
+ <p>There is a buffer overflow in base64d(), if some pre-conditions are met.
+Using a handcrafted message, remote code execution seems to be possible.</p>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <url>https://exim.org/static/doc/security/CVE-2018-6789.txt</url>
+ </references>
+ <dates>
+ <discovery>2018-02-05</discovery>
+ <entry>2018-02-10</entry>
+ </dates>
+ </vuln>
+
<vuln vid="7a2e0063-0e4e-11e8-94c0-5453ed2e2b49">
<topic>p7zip-codec-rar -- insufficient error handling</topic>
<affects>
More information about the svn-ports-head
mailing list