CVE-2020-8015
Fixed in a distro release EPSS <1%CVSS 8.4
A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of exim in openSUSE Factory allows local attackers to escalate from user mail to root. This issue affects: openSUSE Factory exim versions prior to 4.93.0.4-3.1.
Products: openSUSE Factory
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| SUSE Package Hub 15 SP1 | exim | 4.94.2-bp151.2.4.1 |
| SUSE Package Hub 15 SP1 | libspf2 | 1.2.10-bp151.4.1 |
| openSUSE Leap 15.1 | exim | 4.88-lp151.4.12.1 |
| openSUSE Tumbleweed | exim | 4.94.2-4.2 |