What it is
Exim allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other Exim entries on the list
- Exim Exim Heap-Based Buffer Overflow Vulnerability CVE-2010-4344 · Mar 25, 2022
- Exim Internet Mailer Exim Out-of-bounds Write Vulnerability CVE-2019-16928 · Mar 3, 2022
- Mail Transfer Agent (MTA) Exim Mail Transfer Agent (MTA) Improper Input Validation CVE-2019-10149 · Jan 10, 2022
- Exim Exim Buffer Overflow Vulnerability CVE-2018-6789 · Nov 3, 2021