Exim Schwachstelle

Question

Hallo zusammen, 
 im Exim gibt es seit gestern eine Schwachstelle wei&szlig; hier jemand ob auch die Sophos XG Firewall davon betroffen ist. 
 Hier noch die CVE Nummer: CVE-2023-42119 der Score liegt bei 9,8 
 Mit freundlichen Gr&uuml;&szlig;en 
 Straubinger Simon

Raphael Alganes · Accepted Answer

Hello Simon / Team, 
 
 Update: 
 
 Recently some vulnerabilities for exim have been reported. Vulnerabilities reported are: 
 CVE-2023-42114, CVE-2023-42115, CVE-2023-42116, CVE-2023-42117, CVE-2023-42118, CVE-2023-42219. 
 Please find more information about Sophos products being vulnerable: 
 CVE-2023-42114: SFOS + UTM are not vulnerable because the SPA (NTLM) authentication method required to exploit is not used 
 CVE-2023-42115: SFOS + UTM are not vulnerable because the EXTERNAL authentication method required to exploit is not used 
 CVE-2023-42116: SFOS + UTM are not vulnerable because the SPA (NTLM) authentication method required to exploit is not used 
 CVE-2023-42117: SFOS + UTM are not vulnerable because the proxy-protocol support required to exploit is not used 
 UTM and SFOS are both affected by the libspf2 vulnerability (CVE-2023-42118). Customers using Email Security and have turned on Sender Policy Framework (SPF) are vulnerable to this. 
 CVE-2023-42219: Under investigation. There's not enough info from exim yet to determine if we're vulnerable, but it's a CVSS 3.1 so lower severity compared to the others. 
 Workaround: 
 Disable SPF using the following steps 
 SFOS: 
 &ensp;&ensp;&ensp;&ensp;&ensp;&ensp;Turn off SPF in all (MTA mode) SMTP policies under "Email >> Policies & exceptions >> [edit policy] >> Spam protection >> Reject based on SPF". 
 
 An SFOS hotfix will be released to patch this vulnerability by 5 th October. 
 
 Regards,

Exim Schwachstelle

Top Replies