CVE-2020-28014

Exim 4 before 4.94.2 allows Execution with Unnecessary Privileges. The -oP option is available to the exim user, and allows a denial of service because root-owned files can be overwritten.

Affected products

Alt Linux, Astra Linux, Exim, Linuxmint, Suse, Ubuntu

Exim

< 4.94.2

Fix

Available

CVSS 3.1

6.1 MEDIUM

EPSS

0.9% (58th percentile)

Weakness

CWE-269

NVD status

Modified

Published

2021-05-06