ZDI-25-200: Exim Use-After-Free Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Exim. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-30232.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-25-200?
The vulnerability ZDI-25-200 has been assigned a CVSS rating of 7.8, indicating a high severity level.
How can I exploit ZDI-25-200?
To exploit ZDI-25-200, an attacker must first execute low-privileged code on the affected Exim installation.
What software is affected by ZDI-25-200?
ZDI-25-200 affects installations of Exim email server software.
What are the potential impacts of ZDI-25-200?
Exploitation of ZDI-25-200 could allow local attackers to escalate their privileges on the affected system.
How do I fix ZDI-25-200?
To mitigate ZDI-25-200, it is recommended to update Exim to the latest version provided by the vendor.