CVE-2010-4344

exim, opensuse, debian linux

Published 14 Dec 2010 · updated 16 Jun 2026 · Analyzed

9.8 Critical · CVSS 3.1, NVD

Exploited in the wild

CISA added this to its Known Exploited Vulnerabilities catalog on 25 Mar 2022, with a remediation deadline of 15 Apr 2022 for US federal agencies.

Required action: Apply updates per vendor instructions.

Description

Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session that includes two MAIL commands in conjunction with a large message containing crafted headers, leading to improper rejection logging.

References

atmail.com/blog/2010/atmail-6204-now-available/ · Broken Link
bugs.exim.org/show_bug.cgi?id=787 · Issue Tracking, Patch
git.exim.org/exim.git/commit/24c929a27415c7cfc7126c47e4cad39acf3efa6b · Mailing List, Patch
lists.exim.org/lurker/message/20101210.164935.385e04d0.en.html · Mailing List, Patch
lists.opensuse.org/opensuse-security-announce/2010-12/msg00003.html · Mailing List, Third Party Advisory
openwall.com/lists/oss-security/2010/12/10/1 · Mailing List, Third Party Advisory
secunia.com/advisories/40019 · Broken Link, Vendor Advisory
secunia.com/advisories/42576 · Broken Link, Vendor Advisory
secunia.com/advisories/42586 · Broken Link, Vendor Advisory
secunia.com/advisories/42587 · Broken Link, Vendor Advisory
secunia.com/advisories/42589 · Broken Link, Vendor Advisory
www.cpanel.net/2010/12/exim-remote-memory-corruption-vulnerability-notification-cve-2010-4344.html · Broken Link
www.debian.org/security/2010/dsa-2131 · Mailing List, Third Party Advisory
www.exim.org/lurker/message/20101207.215955.bb32d4f2.en.html · Exploit, Mailing List
www.kb.cert.org/vuls/id/682457 · Third Party Advisory, US Government Resource
www.metasploit.com/modules/exploit/unix/smtp/exim4_string_format · Third Party Advisory
www.openwall.com/lists/oss-security/2021/05/04/7 · Exploit, Mailing List
www.osvdb.org/69685 · Broken Link, Exploit, Patch
www.redhat.com/support/errata/RHSA-2010-0970.html · Broken Link
www.securityfocus.com/archive/1/515172/100/0/threaded · Broken Link, Third Party Advisory, VDB Entry
www.securityfocus.com/bid/45308 · Broken Link, Third Party Advisory, VDB Entry
www.securitytracker.com/id?1024858 · Broken Link, Third Party Advisory, VDB Entry
www.theregister.co.uk/2010/12/11/exim_code_execution_peril/ · Press/Media Coverage
www.ubuntu.com/usn/USN-1032-1 · Third Party Advisory
www.vupen.com/english/advisories/2010/3171 · Broken Link, Vendor Advisory