CVE-2023-42116: 
Exim vulnerability analysis and mitigation

CVE-2023-42116 is a high-severity vulnerability (CVSS score: 8.1) discovered in Exim email server software. The vulnerability was reported to the vendor on June 14, 2022, and was publicly disclosed on September 27, 2023, by Zero Day Initiative. This stack-based buffer overflow vulnerability exists within the handling of NTLM challenge requests in Exim's SMTP service (ZDI Advisory).

The vulnerability stems from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer when handling NTLM challenge requests. The issue is classified as CWE-121 (Stack-based Buffer Overflow). It has received a CVSS v3.0 base score of 8.1 (High) with the vector string AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating that it is network-accessible, requires no privileges or user interaction, but has high attack complexity (NVD).

An attacker can leverage this vulnerability to execute arbitrary code in the context of the service account on affected installations of Exim. The vulnerability affects confidentiality, integrity, and availability with high impact levels. No authentication is required to exploit this vulnerability, making it particularly dangerous (ZDI Advisory, SOCRadar).

The vulnerability is remotely exploitable without requiring authentication. While the attack complexity is rated as high, the lack of required privileges or user interaction makes this vulnerability particularly concerning. No specific details about exploitation in the wild have been publicly reported (ZDI Advisory).

On September 29, 2023, fixes for this vulnerability were made available in a secured repository for distribution maintainers to implement. The Exim project team has confirmed that fixes are ready to be applied by distribution maintainers. Given the nature of the vulnerability, the primary mitigation strategy is to restrict interaction with the application until patches can be applied (SOCRadar).