Oval Definition:oval:org.opensuse.security:def:201913917
Revision Date:2022-06-30Version:1
Title:CVE-2019-13917
Description:

Exim 4.85 through 4.92 (fixed in 4.92.1) allows remote code execution as root in some unusual configurations that use the ${sort } expansion for items that can be controlled by an attacker (e.g., $local_part or $domain).
Family:unixClass:vulnerability
Status:Reference(s):CVE-2019-13917
TID000019528
TID7024110
Mitre CVE-2019-13917
SUSE CVE-2019-13917
openSUSE-SU-2021:0753-1
Platform(s):openSUSE Leap 15.0
openSUSE Leap 15.1
openSUSE Tumbleweed
SUSE Linux Enterprise High Performance Computing 15 SP1
SUSE Linux Enterprise Server 15 SP1
SUSE Linux Enterprise Server for SAP Applications 15 SP1
SUSE Linux Enterprise Storage 6
SUSE Manager Proxy 4.0
SUSE Manager Server 4.0
SUSE Package Hub for SUSE Linux Enterprise 15 SP1
Product(s):
Definition Synopsis
  • openSUSE Leap 15.0 is installed
  • AND Package Information
  • exim-4.88-lp150.3.6 is installed
  • AND exim is signed with openSUSE key
  • OR
  • eximon-4.88-lp150.3.6 is installed
  • AND eximon is signed with openSUSE key
  • OR
  • eximstats-html-4.88-lp150.3.6 is installed
  • AND eximstats-html is signed with openSUSE key
  • Definition Synopsis
  • openSUSE Leap 15.1 is installed
  • AND Package Information
  • exim-4.88-lp151.4.6 is installed
  • AND exim is signed with openSUSE key
  • OR
  • eximon-4.88-lp151.4.6 is installed
  • AND eximon is signed with openSUSE key
  • OR
  • eximstats-html-4.88-lp151.4.6 is installed
  • AND eximstats-html is signed with openSUSE key
  • Definition Synopsis
  • openSUSE Tumbleweed is installed
  • AND Package Information
  • exim-4.94.2-4.2 is installed
  • OR eximon-4.94.2-4.2 is installed
  • OR eximstats-html-4.94.2-4.2 is installed
  • Definition Synopsis
  • SUSE Package Hub for SUSE Linux Enterprise 15 SP1 is installed
  • AND Package Information
  • exim-4.94.2-bp151.2.4.1 is installed
  • OR eximon-4.94.2-bp151.2.4.1 is installed
  • OR eximstats-html-4.94.2-bp151.2.4.1 is installed
  • OR libspf2-2-1.2.10-bp151.4.1 is installed
  • OR libspf2-devel-1.2.10-bp151.4.1 is installed
  • OR libspf2-tools-1.2.10-bp151.4.1 is installed
  • BACK