CVE-2017-1000369

Name	CVE-2017-1000369
Description	Exim supports the use of multiple "-p" command line arguments which are malloc()'ed and never free()'ed, used in conjunction with other issues allows attackers to cause arbitrary code execution. This affects exim version 4.89 and earlier. Please note that at this time upstream has released a patch (commit 65e061b76867a9ea7aeeb535341b790b90ae6c21), but it is not known if a new point release is available that addresses this issue at this time.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DLA-1001-1, DSA-3888-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
exim4 (PTS)	jessie, jessie (lts)	4.84.2-2+deb8u12	fixed
	stretch (security)	4.89-2+deb9u8	fixed
	stretch (lts), stretch	4.89-2+deb9u13	fixed
	buster, buster (lts)	4.92-8+deb10u10	fixed
	buster (security)	4.92-8+deb10u9	fixed
	bullseye	4.94.2-7+deb11u3	fixed
	bullseye (security)	4.94.2-7+deb11u4	fixed
	bookworm	4.96-15+deb12u6	fixed
	bookworm (security)	4.96-15+deb12u5	fixed
	sid, trixie	4.98-2	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Origin
exim4	source	wheezy	4.80-7+deb7u5	DLA-1001-1
exim4	source	jessie	4.84.2-2+deb8u4	DSA-3888-1
exim4	source	stretch	4.89-2+deb9u1	DSA-3888-1
exim4	source	(unstable)	4.89-3

https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt