CVE-2012-5671 Memory corruption in n/a
Remote attackers can execute arbitrary code on Exim mail servers via a malicious DNS response when DKIM verification is enabled.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2012-5671?
CVE-2012-5671 is a medium-severity memory corruption vulnerability in Exim Exim, published on 31 Oct 2012. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Heap-based buffer overflow in the dkim_exim_query_dns_txt function in dkim.c in Exim 4.70 through 4.80, when DKIM support is enabled and acl_smtp_connect and acl_smtp_rcpt are not set to "warn control = dkim_disable_verify," allows remote attackers to execute arbitrary code via an email from a malicious DNS server.
Weakness: CWE-119
Which versions are affected by CVE-2012-5671?
It affects 1 product.
Products include Exim Exim.
How do I fix CVE-2012-5671?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2012-5671 being exploited?
There is no known exploitation of CVE-2012-5671 in the wild and no public exploit code.
Other vulnerabilities in Exim Exim
Sources
Also known as DEBIAN-CVE-2012-5671, DSA-2566-1, GHSA-9mj7-g6p8-v73f.