Sploitus

CVE-2017-16943

6 known exploits for CVE-2017-16943

The receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via vectors involving BDAT commands.

Affected products
Alt Linux, Exim, Suse, Ubuntu
Exim
= 4.88, 4.89
CVSS 3.0
9.8 CRITICAL
EPSS
43.6% (99th percentile)
Weakness
CWE-416
NVD status
Modified
Published
2017-11-25
CVE-2017-16943 at NVD
Authoritative description, scoring and affected products

6 known exploits for CVE-2017-16943

Proof-of-concept code and exploit modules indexed by Sploitus

CVE-2017-16943
2026-08-27 KitPloitKITPLOIT
📄 Qualys Security Advisory - Exim 21Nails Advisory
2026-02-11 Qualys Security AdvisoryPACKETSTORMPerl
📄 Exim Vulnerability Scanner
2025-12-10 indoushkaPACKETSTORMPHP
Exim Use-After-Free Exploit
2017-11-30 botZDTC
Exim 4.89 - 'BDAT' Denial of Service(CVE-2017-16944)
2017-11-29 RootSEEBUG
Exim Use-After-Free(CVE-2017-16943)
2017-11-28 RootSEEBUGPython