Exim: Schwachstelle ermöglicht Privilegieneskalation

Summary

Product

Vulnerabilities 1

• High 8.1
  CVE-2025-30232

  A use-after-free in Exim 4.96 through 4.98.1 could allow users (with command-line access) to escalate privileges.

  Exim Exim exim4 exim4 Debian Ubuntu Alpine
  Mar 27, 2025

Revision history

1. 2026-08-13 #5

   Neue Updates von Gentoo aufgenommen

2. 2026-05-21 #4

   Neue Updates aufgenommen

3. 2025-06-12 #3

   Neue Updates aufgenommen

4. 2025-03-30 #2

   Neue Updates von openSUSE aufgenommen

5. 2025-03-26 #1

   Initiale Fassung

References

• Exim Security update CVE-2025-30232 vom 2025-03-26
  https://www.exim.org/static/doc/security/CVE-2025-30232.txt
• Mailing List OSS Security vom 2025-03-26
  https://seclists.org/oss-sec/2025/q1/245
• Exim Fix
  https://code.exim.org/exim/exim/commit/be040d7df68a8cbb244aaabc37832984dafcbf55
• Debian Security Advisory DSA-5887 vom 2025-03-26
  https://lists.debian.org/debian-security-announce/2025/msg00049.html
• Arch Linux Security Advisory ASA-202503-1 vom 2025-03-26
  https://security.archlinux.org/ASA-202503-1
• Ubuntu Security Notice USN-7373-1 vom 2025-03-26
  https://ubuntu.com/security/notices/USN-7373-1
• openSUSE Security Update OPENSUSE-SU-2025:14935-1 vom 2025-03-29
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/FWOEKGYKRDYC2W34VQF5FTTBG3QZEGCU/
• cPanel 128 Change Log vom 2025-06-13
  https://docs.cpanel.net/changelogs/128-change-log/
• cPanel & WHM Change Log vom 2026-05-21
  https://docs.cpanel.net/changelogs/126-change-log/
• Gentoo Linux Security Advisory GLSA-202608-07 vom 2026-08-14
  https://security.gentoo.org/glsa/202608-07