CVE-2019-10149

Confirmed PUBLISHED

A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message() function in...

exim · exim

Exploited in the wild PoC available

Recommended Action

Prioritize remediation. Validate affected assets and apply vendor fixes on an accelerated timeline.

View KEV Feed Talk to Sales

Confidence

Confirmed

Exploitation Status

Exploited in the wild

Observed in Sensors

Attempts (30d)

—

Unique Attacker IPs

—

CISA KEV

In CISA KEV

CVSS / EPSS

9.0 Critical

At a Glance

A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution.

metasploit cisa

CVE Published: Jun 05, 2019
Exploitation Reported: Jan 10, 2022
CVSS: 9.0 Critical
EPSS: —

Remote No user interaction Unauthenticated

Affected Versions

Vendor	Product	Version	Status
exim	exim	4.92	Affected

CVE References

USN-4010-1 usn.ubuntu.com · Vendor Advisory https://usn.ubuntu.com/4010-1/
DSA-4456 debian.org · Vendor Advisory https://www.debian.org/security/2019/dsa-4456
GLSA-201906-01 security.gentoo.org · Vendor Advisory https://security.gentoo.org/glsa/201906-01
openSUSE-SU-2019:1524 lists.opensuse.org · Vendor Advisory http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00020...
108679 securityfocus.com · VDB Entry http://www.securityfocus.com/bid/108679

Show 15 more references

[oss-security] 20190605 Re: CVE-2019-10149: Exim 4.87 to 4.91: possible remote exploit openwall.com · Mailing List http://www.openwall.com/lists/oss-security/2019/06/05/2
[oss-security] 20190605 Re: CVE-2019-10149: Exim 4.87 to 4.91: possible remote exploit openwall.com · Mailing List http://www.openwall.com/lists/oss-security/2019/06/05/3
[oss-security] 20190605 Re: CVE-2019-10149: Exim 4.87 to 4.91: possible remote exploit openwall.com · Mailing List http://www.openwall.com/lists/oss-security/2019/06/05/4
20190605 [SECURITY] [DSA 4456-1] exim4 security update seclists.org · Mailing List https://seclists.org/bugtraq/2019/Jun/5
[oss-security] 20190606 Re: CVE-2019-10149: Exim 4.87 to 4.91: possible remote exploit openwall.com · Mailing List http://www.openwall.com/lists/oss-security/2019/06/06/1
20190611 The Return of the WIZard: RCE in Exim (CVE-2019-10149) seclists.org · Mailing List http://seclists.org/fulldisclosure/2019/Jun/16
[oss-security] 20190725 Re: Statistics for distros lists updated for 2019Q2 openwall.com · Mailing List http://www.openwall.com/lists/oss-security/2019/07/25/6
[oss-security] 20190725 Re: Statistics for distros lists updated for 2019Q2 openwall.com · Mailing List http://www.openwall.com/lists/oss-security/2019/07/25/7
[oss-security] 20190726 Re: Statistics for distros lists updated for 2019Q2 openwall.com · Mailing List http://www.openwall.com/lists/oss-security/2019/07/26/4
[oss-security] 20210504 21Nails: Multiple vulnerabilities in Exim openwall.com · Mailing List http://www.openwall.com/lists/oss-security/2021/05/04/7
bugzilla.redhat.com/show_bug.cgi bugzilla.redhat.com · CVE Record https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10149
exim.org/static/doc/security/CVE-2019-10149.txt exim.org · CVE Record https://www.exim.org/static/doc/security/CVE-2019-10149.txt
packetstormsecurity.com/files/153218/Exim-4.9.1-Remote-Command-Execu... packetstormsecurity.com · CVE Record http://packetstormsecurity.com/files/153218/Exim-4.9.1-Remote-Command...
packetstormsecurity.com/files/153312/Exim-4.91-Local-Privilege-Escal... packetstormsecurity.com · CVE Record http://packetstormsecurity.com/files/153312/Exim-4.91-Local-Privilege...
packetstormsecurity.com/files/154198/Exim-4.91-Local-Privilege-Escal... packetstormsecurity.com · CVE Record http://packetstormsecurity.com/files/154198/Exim-4.91-Local-Privilege...

Recommended Actions

Prioritize remediation. Validate affected assets and apply vendor fixes on an accelerated timeline.
Check enrichment artifacts for scanner coverage and available PoCs before rolling remediation validation.
Use the Pro API to automate enrichment, telemetry, and workflow delivery for VM, SOC, and CTI pipelines.

Known Exploited Vulnerability Sources

Catalogues that list this CVE as a known exploited vulnerability.

Per-source evidence links for KEV attestations are available through the KEVIntel Pro API.

Learn about Pro API access

Source	Added
CISA First	2022-01-10 00:00 UTC

Scanner Artifacts

Nuclei and Metasploit references linked to this CVE.

Scanner	Reference	Detected
Metasploit	https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/exim4_deliver_message_priv_esc.rb	Apr 28, 2025

CVSS Scores

CVSS v3.0 9.0 Critical

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Exploitation Status

Exploited in the wild

Recorded 2022-01-10 00:00:00 UTC · CISA

Proof of concept available

Recorded 2019-06-12 03:47:16 UTC · GitHub

Weaknesses (CWE)

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Scanner Integrations

Scanner	Reference	Detected
Metasploit	https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/exim4_deliver_message_priv_esc.rb	Apr 28, 2025

Potential Proof of Concepts

These PoCs are unverified and could contain malware. Use at your own risk.

qlusec/CVE-2019-10149

github · Created 2024-09-06 16:21:17 UTC · 0 stars

test POC for CVE-2019-10149

hyim0810/CVE-2019-10149

github · Created 2023-10-25 02:25:17 UTC · 0 stars

CVE-2019-10149

Dilshan-Eranda/CVE-2019-10149

github · Created 2020-05-12 15:11:54 UTC · 0 stars

SNP Assignment on a Linux vulnerability

Diefunction/CVE-2019-10149

github · Created 2019-10-27 01:03:11 UTC · 16 stars

CVE-2019-10149 : A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution.

darsigovrustam/CVE-2019-10149

github · Created 2019-10-21 08:13:27 UTC · 4 stars

Instructions for installing a vulnerable version of Exim and its expluatation

AzizMea/CVE-2019-10149-privilege-escalation

github · Created 2019-06-27 01:34:41 UTC · 9 stars

CVE-2019-10149 privilege escalation

aishee/CVE-2019-10149-quick

github · Created 2019-06-14 14:02:43 UTC · 1 stars

Simple Bash shell quick fix CVE-2019-10149

MNEMO-CERT/PoC--CVE-2019-10149_Exim

github · Created 2019-06-13 23:21:53 UTC · 14 stars

PoC for CVE-2019-10149, this vulnerability could be xploited betwen 4-87 to 4.91 version of Exim server.

cowbe0x004/eximrce-CVE-2019-10149

github · Created 2019-06-12 03:47:16 UTC · 13 stars

simple python socket connection to test if exim is vulnerable to CVE-2019-10149. The payload simply touch a file in /tmp/eximrce.

exim4_deliver_message_priv_esc

metasploit · Created Unknown

Metasploit module for CVE-2019-10149

Automate This Intelligence with the Pro API

Confidence scoring, exploit status, sensor telemetry, PoCs, scanner integrations, mentions, and tags are available programmatically for VM, SOC, and CTI workflows.

View Pro Pricing View API Docs

Pro API Example

GET /api/v2/pro/kevs/CVE-2019-10149

{
  "cve_id": "CVE-2019-10149",
  "title": "A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validati...",
  "affected_vendor": "exim",
  "affected_product": "exim",
  "affected_versions": [
    { "vendor": "...", "product": "...", "status": "affected", "display_label": "..." }
  ],
  "confidence": "Confirmed",
  "cvss_score": 9.0,
  "epss_score": null,
  "exploit_status": {
    "exploited_in_the_wild": true,
    "active_exploitation_observed": false
  },
  "sensor_telemetry": { "...": "Pro API fields" },
  "proof_of_concepts": [ "..." ],
  "scanner_integrations": [ "..." ]
}

The free JSON API returns basic KEV fields only. Confidence, telemetry, and artifact enrichment require Pro API access.

CVE-2019-10149

At a Glance

Affected Versions

CVE References

Recommended Actions

Known Exploited Vulnerability Sources

Scanner Artifacts

Virtual Patch

CVSS Scores

Exploitation Status

Weaknesses (CWE)

Scanner Integrations

Potential Proof of Concepts

Timeline

Automate This Intelligence with the Pro API