{"id":181813,"date":"2026-05-30T20:48:06","date_gmt":"2026-05-30T18:48:07","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/obnovlenie-exim-4-99-4-s-ustraneniem-uyazvimosti-privodyashhej-k-utechke-pamyati"},"modified":"2026-05-30T20:48:06","modified_gmt":"2026-05-30T18:48:07","slug":"obnovlenie-exim-4-99-4-s-ustraneniem-uyazvimosti-privodyashhej-k-utechke-pamyati","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/obnovlenie-exim-4-99-4-s-ustraneniem-uyazvimosti-privodyashhej-k-utechke-pamyati","title":{"rendered":"Exim 4.99.4 uuendus, mis lahendab m\u00e4luleke probleemi.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

On avaldati parandav v\u00e4ljaanne e-posti serverist Exim 4.99.4, milles k\u00f5rvaldatud haavatavus (CVE-2026-48840) p\u00f5hjustas 16 mitteinitsialiseeritud baitide lekkimist protsessi t\u00f6\u00f6tleja steki kaudu kliendile antud IPv6 aadressi teabes SMTP Hello p\u00e4ises. Praktikas saab parandatud lekkimist kasutada teiste haavatavuste \u00e4rakasutamisel, et m\u00e4\u00e4rata m\u00e4lu paigutus aadresside randomiseerimise (ASLR) konfiguratsioonides. <\/p>\n

Probleem ilmneb alates versioonist Exim 4.88 (2017. aasta) s\u00fcsteemides, mis kasutavad hosts_proxy seadistust ning Eximi kogumikke, mis on kompileeritud koos SUPPORT_PROXY valikuga (vaikimisi Debianis, Ubuntu, RHEL EPEL ja Fedoras). Haavatavus tuleneb raamide suuruse n\u00f5uetekohase kontrollimise puudumisest PROXYv2 protokolli kasutavate p\u00e4ringute k\u00e4sitlemisel.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 Exim 4.99.4, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2026-48840), \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u0443\u0442\u0435\u0447\u043a\u0435 16 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0431\u0430\u0439\u0442 \u0438\u0437 \u0441\u0442\u0435\u043a\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430-\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 \u0432 \u043e\u0442\u0434\u0430\u0432\u0430\u0435\u043c\u043e\u0439 \u043a\u043b\u0438\u0435\u043d\u0442\u0443 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e\u0431 \u0430\u0434\u0440\u0435\u0441\u0435 IPv6 \u0432 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0435 SMTP Hello. \u041d\u0430 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0443\u0442\u0435\u0447\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043f\u0440\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0434\u043b\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0440\u0430\u0441\u043a\u043b\u0430\u0434\u043a\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f\u0445 \u0441 \u0440\u0430\u043d\u0434\u043e\u043c\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0430\u0434\u0440\u0435\u0441\u043e\u0432 (ASLR). \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0430\u0447\u0438\u043d\u0430\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-181813","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Exim 4.99.4 v\u00e4rskendus, mis k\u00f5rvaldab haavatavuse, mis p\u00f5hjustab m\u00e4lu leket | ProHoster","description":"On avaldati parandav v\u00e4ljaanne e-posti serverist Exim 4.99.4, milles k\u00f5rvaldatud haavatavus (CVE-2026-48840) p\u00f5hjustas 16 mitteinitsialiseeritud baitide lekkimist protsessi t\u00f6\u00f6tleja steki kaudu klientidele antud teabes.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/obnovlenie-exim-4-99-4-s-ustraneniem-uyazvimosti-privodyashhej-k-utechke-pamyati","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Exim 4.99.4 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0435\u0439 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 Exim 4.99.4, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2026-48840), \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u0443\u0442\u0435\u0447\u043a\u0435 16 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0431\u0430\u0439\u0442 \u0438\u0437 \u0441\u0442\u0435\u043a\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430-\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 \u0432 \u043e\u0442\u0434\u0430\u0432\u0430\u0435\u043c\u043e\u0439 \u043a\u043b\u0438\u0435\u043d\u0442\u0443.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/obnovlenie-exim-4-99-4-s-ustraneniem-uyazvimosti-privodyashhej-k-utechke-pamyati","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-05-30T18:48:07+00:00","article:modified_time":"2026-05-30T18:48:07+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/181813","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=181813"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/181813\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=181813"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=181813"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=181813"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}