PT-2020-19919 · Opensuse+1 · Exim+1

Johannes Segitz · Published 2020-04-02 · Updated 2025-09-25 · CVE-2020-8015

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions openSUSE Factory exim versions prior to 4.93.0.4-3.1

Description A UNIX Symbolic Link (Symlink) Following issue in the packaging of exim in openSUSE Factory allows local attackers to escalate from user mail to root.

Recommendations For openSUSE Factory exim versions prior to 4.93.0.4-3.1, update to version 4.93.0.4-3.1 or later to resolve the issue.

Exploit

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2020-8015

OPENSUSE-SU-2020:0491-1

OPENSUSE-SU-2020_0491-1

OPENSUSE-SU-2021:0753-1

OPENSUSE-SU-2024:10746-1

Affected Products

Suse

Exim

References · 50

• 🔥 https://bugzilla.suse.com/show_bug.cgi?id=1154183 · Exploit
• http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00010.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-8015 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:10746-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2021:0753-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-8015 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:0491-1 · Vendor Advisory
• https://lists.opensuse.org/archives/list/[e-mail]/thread/WJR5MNZSFIS6CLLRASPPRSAP44RXZCZX · Note
• https://bugzilla.suse.com/1171877 · Note
• https://suse.com/security/cve/CVE-2020-28019 · Note
• https://suse.com/security/cve/CVE-2017-1000369 · Note
• https://suse.com/security/cve/CVE-2020-8015 · Note
• https://bugzilla.suse.com/1079832 · Note
• https://bugzilla.suse.com/1136587 · Note
• https://bugzilla.suse.com/1160726 · Note