CVE-2021-27216 — Race Condition in Exim

CWE-362 — Race ConditionCWE-269 — Improper Privilege Management12 documents8 sources
Severity
6.3MEDIUMNVD
EPSS
0.1%
top 82.10%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Exim
Timeline
PublishedMay 6
Latest updateMay 24

Description

Exim 4 before 4.94.2 has Execution with Unnecessary Privileges. By leveraging a delete_pid_file race condition, a local user can delete arbitrary files as root. This involves the -oP and -oPX options.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:HExploitability: 1.0 | Impact: 5.2

Affected Packages1 packages

▶NVDexim/exim< 4.94.2

🔴Vulnerability Details

3
GHSA
GHSA-3gw6-8wwv-rhr2: Exim 4 before 4↗2022-05-24
▶
CVEList
CVE-2021-27216: Exim 4 before 4↗2021-05-06
▶
OSV
CVE-2021-27216: Exim 4 before 4↗2021-05-06
▶

📋Vendor Advisories

6
Oracle
Oracle Oracle JD Edwards Risk Matrix: Installation (Eclipse Jetty) — CVE-2020-27216↗2021-10-15
▶
Oracle
Oracle Oracle Communications Applications Risk Matrix: CN OCOMC (Eclipse Jetty) — CVE-2020-27216↗2021-07-15
▶
Ubuntu
Exim vulnerabilities↗2021-05-06
▶
Ubuntu
Exim vulnerabilities↗2021-05-04
▶
Oracle
Oracle Oracle Communications Risk Matrix: Core (Eclipse Jetty) — CVE-2020-27216↗2021-01-15
▶

🕵️Threat Intelligence

2
Qualys
21Nails: Multiple Critical Vulnerabilities in Exim Mail Server↗2021-05-04
▶
Qualys
21Nails: Multiple Critical Vulnerabilities in Exim Mail Server | Qualys↗2021-05-04
▶