Zero-Day Vulnerabilities in Exim Email Server: Risk of RCE (CVE-2023-42115, CVE-2023-42116, CVE-2023-42117, and More)

Zero Day Initiative disclosed a total of six zero-day vulnerabilities in the Exim Internet Mailer, which potentially make thousands of email servers worldwide vulnerable to exploitation.

Exim, a widely used free mail transfer agent (MTA) software on Unix-like operating systems, currently boasts over 342,000 servers worldwide, according to the latest survey. 

Exim has previously fallen victim to many attacks due to vulnerabilities. In 2020, researchers revealed that Russian GRU threat actors, “Sandworm Team,” had actively exploited a vulnerability ( …

agent cve cve-2023-42115 email email server exim exploitation free initiative internet mail operating systems rce risk server servers software systems transfer unix vulnerabilities vulnerable zero-day zero day initiative zero-day vulnerabilities