Exim 4.98 before 4.98.1, when SQLite hints and ETRN serialization are used, allows remote SQL injection
Exim · Exim
The flaw is an SQL injection in Exim 4.98 (before 4.98.1), in the handling of SQLite hints and ETRN serialization within the Exim mail transfer agent. An attacker with remote network access and no authentication or user interaction can inject SQL into the affected code path, which in certain non-default rate-limit configurations is only fully resolved by updating to 4.99.1.
Exim 4.98 before 4.98.1, when SQLite hints and ETRN serialization are used, allows remote SQL injection. (Resolving SQL injection requires an update to 4.99.1 in certain non-default rate-limit configurations.)
- Exploited
- Not confirmed
- Reports
- 0
- Tactics
- 0/15
Exploitation timelineDated milestones for a CVE: when it was disclosed, when exploit code became public, when exploitation was confirmed, and when threat reports named it.
Public exploit code (PoC-in-GitHub) appeared 1 day after disclosure. No confirmed exploitation is recorded.
- Disclosedday 0
- Public exploit codePoC-in-GitHub+1 day
MITRE ATT&CKA public catalogue of the techniques attackers use, maintained by MITRE. Patchfirst uses it to describe what attackers do with a vulnerability. techniques
No techniques linkedNo ATT&CK techniques are linked to this CVE yet. MITRE CTID has not mapped it, and no report passage in the corpus ties it to a technique.