Ọrụ Zero Day Initiative (ZDI) ekpughere ozi gbasara adịghị ike (0-ụbọchị) adịghị ike (CVE-2023-42115, CVE-2023-42116, CVE-2023-42117) na sava ozi Exim, na-enye gị ohere ịme ngwa ngwa gị ozugbo. Koodu na sava nwere usoro ikike nke na-anabata njikọ na ọdụ ụgbọ mmiri 25. Ọnweghị nkwenye achọrọ iji mee mwakpo ahụ.
Ihe ọghọm nke mbụ (CVE-2023-42115) kpatara njehie na ọrụ smtp ma jikọta ya na enweghị nyocha ziri ezi na data enwetara n'aka onye ọrụ n'oge nnọkọ SMTP ma jiri ya gbakọọ nha nchekwa. N'ihi nke a, onye na-awakpo ahụ nwere ike nweta ederede a na-achịkwa nke data ya na ebe nchekwa dị n'ofe oke nke ihe nchekwa ekenyela.
Ọdịmma nke abụọ (CVE-2023-42116) dị na onye na-arịọ arịrịọ NTLM ma kpatara ya site na iṅomi data enwetara n'aka onye ọrụ n'ime ebe nchekwa nwere oke na-enweghị nyocha dị mkpa maka nha ozi edere.
Ihe ọghọm nke atọ (CVE-2023-42117) dị na usoro smtp na-anabata njikọ na ọdụ ụgbọ mmiri TCP 25 ma kpatara enweghị nkwenye ntinye, nke nwere ike iduga na-ederede data onye ọrụ nyere na mpaghara ebe nchekwa na mpụga ebe nchekwa ekenyela. .
Akara adịghị ike dị ka ụbọchị 0, ya bụ. ka edobeghi ya, mana akụkọ ZDI na-ekwu na a mara ndị mmepe Exim maka nsogbu ndị ahụ tupu oge eruo. Emere mgbanwe ikpeazụ na Exim codebase ụbọchị abụọ gara aga ma amabeghị mgbe a ga-edozi nsogbu ahụ (ndị na-emepụta nkesa enwebeghị oge iji meghachi omume ebe ọ bụ na ekpughere ozi ahụ na-enweghị nkọwa ọtụtụ awa gara aga). Ugbu a, ndị mmepe Exim na-akwado ịhapụ ụdị 4.97 ọhụrụ, mana enweghị ozi ọ bụla gbasara oge ebipụtara ya. Naanị usoro nchebe a kpọtụrụ aha ugbu a bụ igbochi ịnweta ọrụ SMTP dabere na Exim.
Na mgbakwunye na adịghị ike ndị ahụ a kpọtụrụ aha n'elu, ekpugherekwa ozi gbasara ọtụtụ nsogbu ndị na-adịchaghị ize ndụ:
- CVE-2023-42118 bụ ọnụọgụgụ integer na-apụta n'ọbá akwụkwọ libspf2 nke na-eme mgbe a na-enyocha macro SPF. Enweghị ike a na-enye ohere imebi ebe nchekwa dịpụrụ adịpụ ma enwere ike iji ya mee ihe iji mepụta koodu na-enweghị usoro. ihe nkesa.
- CVE-2023-42114 bụ ihe na-enweghị nchekwa agụ na onye na-ahụ maka NTLM. Esemokwu a nwere ike bute ọdịnaya ebe nchekwa nke arịrịọ netwọk ọrụ na-agbapụta.
- CVE-2023-42119 bụ adịghị ike na onye na-ahụ maka dnsdb nke na-eduga na nkwụsị ebe nchekwa na usoro smtp.
isi: opennet.ru
