CVE-2020-8015: Local privilege escalation in exim package from user mail to root
A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of exim in openSUSE Factory allows local attackers to escalate from user mail to root. This issue affects: openSUSE Factory exim versions prior to 4.93.0.4-3.1.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
openSUSE Factory eximto a version that resolves this vulnerability.Fixed in 4.93.0.4-3.1
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2020-8015.
What is the title of this vulnerability?
The title of this vulnerability is 'A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of exim in openSUSE Factory'.
What is the severity of CVE-2020-8015?
The severity of CVE-2020-8015 is high with a CVSS score of 7.8.
What software is affected by CVE-2020-8015?
The Exim versions prior to 4.93.0.4-3.1 in openSUSE Factory are affected.
How can a local attacker exploit CVE-2020-8015?
A local attacker can exploit CVE-2020-8015 to escalate from user mail to root by following a symbolic link.