CVE-2021-27216: Race Condition
Published May 6, 2021
·Updated
Exim 4 before 4.94.2 has Execution with Unnecessary Privileges. By leveraging a deletepidfile race condition, a local user can delete arbitrary files as root. This involves the -oP and -oPX options.
Affected Software
13 affected componentsFixes available
Exim Exim<4.94.2
alpine/exim<4.94.2-r0
4.94.2-r0
alpine/exim<4.94.2-r0
4.94.2-r0
alpine/exim<4.94.2-r0
4.94.2-r0
alpine/exim<4.94.2-r0
4.94.2-r0
alpine/exim<4.94.2-r0
4.94.2-r0
alpine/exim<4.94.2-r0
4.94.2-r0
alpine/exim<4.94.2-r0
4.94.2-r0
alpine/exim<4.94.2-r0
4.94.2-r0
alpine/exim<4.94.2-r0
4.94.2-r0
alpine/exim<4.94.2-r0
4.94.2-r0
alpine/exim<4.94.2-r0
4.94.2-r0
alpine/exim<4.94.2-r0
4.94.2-r0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/eximto a version that resolves this vulnerability.Fixed in 4.94.2-r0
Event History
May 6, 2021
CVE Published
via MITRE·04:44 AM
Data Sourced
via MITRE·04:44 AM
Description
Data Sourced
via OSV·01:15 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is CVE-2021-27216?
CVE-2021-27216 is a vulnerability in Exim 4 before version 4.94.2 that allows a local user to delete arbitrary files as root.
2
What is the severity of CVE-2021-27216?
CVE-2021-27216 has a severity rating of 6.3 (medium).
3
How does CVE-2021-27216 work?
CVE-2021-27216 leverages a delete_pid_file race condition to allow a local user to delete files as root.
4
What software versions are affected by CVE-2021-27216?
CVE-2021-27216 affects Exim versions up to but excluding 4.94.2.
5
Is there a fix for CVE-2021-27216?
Yes, upgrading to Exim version 4.94.2 or later fixes CVE-2021-27216.