VIR Vulnerability Intelligence Relay

CVE-2014-2972

medium
Published 2014-09-04 · Modified 2026-05-06
💬 Discuss on Community ✚ Propose mitigation
CVSS v3
—
CVSS v4 NEW
—
not yet in upstream
VIR risk
4.6

Description

expand.c in Exim before 4.83 expands mathematical comparisons twice, which allows local users to gain privileges and execute arbitrary commands via a crafted lookup value.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

Mitigation details

Source: Debian Security Tracker · View original ↗ · DFSG

CVE-2014-2972 NameCVE-2014-2972 Descriptionexpand.c in Exim before 4.83 expands mathematical comparisons twice, which allows local users to gain privileges and execute arbitrary commands via a crafted lookup value. SourceCVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) Vulnerable and fixed…

CVE-2014-2972

NameCVE-2014-2972
Descriptionexpand.c in Exim before 4.83 expands mathematical comparisons twice, which allows local users to gain privileges and execute arbitrary commands via a crafted lookup value.
SourceCVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
exim4 (PTS)bullseye4.94.2-7+deb11u3fixed
bullseye (security)4.94.2-7+deb11u5fixed
bookworm4.96-15+deb12u9fixed
bookworm (security)4.96-15+deb12u10fixed
trixie4.98.2-1+deb13u2fixed
trixie (security)4.98.2-1+deb13u3fixed
forky, sid4.99.3-1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
exim4sourcewheezy4.80-7+deb7u1
exim4source(unstable)4.82.1-2low

Notes

[squeeze] - exim4 <no-dsa> (Minor issue)

Home - Debian Security - Source (Git)

Apply commands

text fix
Notes
[squeeze] - exim4 <no-dsa> (Minor issue)

OS impact
OSVersionStatusFixed in
debian debianbookwormfixed4.82.1-2
debian debianbullseyefixed4.82.1-2
debian debianforkyfixed4.82.1-2
debian debiansidfixed4.82.1-2
debian debiantrixiefixed4.82.1-2

Application impact
VendorProductVersionsFixed
eximexim{"endIncluding":"4.82.1"}
eximexim4.00
eximexim4.01
eximexim4.02
eximexim4.03
eximexim4.04
eximexim4.05
eximexim4.10
eximexim4.11
eximexim4.12
eximexim4.14
eximexim4.20
eximexim4.21
eximexim4.22
eximexim4.23
eximexim4.24
eximexim4.30
eximexim4.31
eximexim4.32
eximexim4.33
eximexim4.34
eximexim4.40
eximexim4.41
eximexim4.42
eximexim4.43
eximexim4.44
eximexim4.50
eximexim4.51
eximexim4.52
eximexim4.53
eximexim4.54
eximexim4.60
eximexim4.61
eximexim4.62
eximexim4.63
eximexim4.64
eximexim4.65
eximexim4.66
eximexim4.67
eximexim4.68
eximexim4.69
eximexim4.70
eximexim4.71
eximexim4.72
eximexim4.73
eximexim4.74
eximexim4.75
eximexim4.76
eximexim4.77
eximexim4.80
eximexim4.80.1
eximexim4.82

References

CWEs

CWE-189

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.