CVE-2016-9963

Exim before 4.87.1 might allow remote attackers to obtain the private DKIM signing key via vectors related to log files and bounce messages.

• CWE-320

• http://www.debian.org/security/2016/dsa-3747Third Party Advisory
• http://www.exim.org/static/doc/CVE-2016-9963.txtMitigation, Vendor Advisory
• http://www.securityfocus.com/bid/94947Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037484Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-3164-1Third Party Advisory
• https://bugs.exim.org/show_bug.cgi?id=1996Issue Tracking, Mitigation, Vendor Advisory
• http://www.debian.org/security/2016/dsa-3747Third Party Advisory
• http://www.exim.org/static/doc/CVE-2016-9963.txtMitigation, Vendor Advisory
• http://www.securityfocus.com/bid/94947Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037484Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-3164-1Third Party Advisory
• https://bugs.exim.org/show_bug.cgi?id=1996Issue Tracking, Mitigation, Vendor Advisory

Published

Feb 1, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-9957Stack-based buffer overflow in game-music-emu before 0.6.1.
• CVE-2016-9958game-music-emu before 0.6.1 allows remote attackers to write…
• CVE-2016-9959game-music-emu before 0.6.1 allows remote attackers to gener…
• CVE-2016-9960game-music-emu before 0.6.1 allows local users to cause a de…
• CVE-2016-9961game-music-emu before 0.6.1 mishandles unspecified integer v…
• CVE-2016-9962RunC allowed additional container processes via 'runc exec' …
• CVE-2016-9964redirect() in bottle.py in bottle 0.12.10 doesn't filter a "…
• CVE-2016-9965Lack of appropriate exception handling in some receivers of …
• CVE-2016-9966Lack of appropriate exception handling in some receivers of …
• CVE-2016-9967Lack of appropriate exception handling in some receivers of …
• CVE-2016-9969In libwebp 0.5.1, there is a double free bug in libwebpmux.
• CVE-2016-9972IBM QRadar 7.2 and 7.3 could allow a remote attacker to obta…