8.4
High
CVE-2020-8015 A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of exim in openSUSE Factory allows local…
Description
A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of exim in openSUSE Factory allows local attackers to escalate from user mail to root. This issue affects: openSUSE Factory exim versions prior to 4.93.0.4-3.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Factory 4.93 | earliest → < 4.93.0.4-3.1 | 4.93.0.4-3.1 |
References
- openSUSE-SU-2020:0491 lists.opensuse.org
- bugzilla.suse.com bugzilla.suse.com
Timeline
- Published
- Last modified
Other CVEs of Factory
The 24 CVEs of Factory →
CVE-2022-31253
A Untrusted Search Path vulnerability in openldap2 of openSUSE Factory allows local attackers with control of the ldap…
7.1
High
CVE-2022-21946
A Incorrect Permission Assignment for Critical Resource vulnerability in the sudoers configuration in cscreen of…
5.3
Medium
CVE-2022-21945
A Insecure Temporary File vulnerability in cscreen of openSUSE Factory allows local attackers to cause DoS for cscreen…
5.1
Medium
CVE-2022-21944
A UNIX Symbolic Link (Symlink) Following vulnerability in the systemd service file for watchman of openSUSE Backports…
7.8
High