Every CVE Search/ Get API key

CVE-2021-27216

Exim 4 before 4.94.2 has Execution with Unnecessary Privileges. By leveraging a delete_pid_file...

6.3 MediumFix available

Exim 4 before 4.94.2 has Execution with Unnecessary Privileges. By leveraging a delete_pid_file race condition, a local user can delete arbitrary files as root. This involves the -oP and -oPX options.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
High
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
High
Availability
High

Exploit likelihood

0.98%Up 0.6 points since May 7, 2021
90%50%10%1%

What each source reports

NVD Score used 6.3

Exim 4 before 4.94.2 has Execution with Unnecessary Privileges. By leveraging a delete_pid_file race condition, a local user can delete arbitrary files as root. This involves the -oP and -oPX options.

Record
CVE-2021-27216
CVSS 3.1
6.3 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H
CVSS 2.0
6.3 MediumAV:L/AC:M/Au:N/C:N/I:C/A:C
Weakness
CWE-362
Updated
2026-11-02
CVE List No score

Exim 4 before 4.94.2 has Execution with Unnecessary Privileges. By leveraging a delete_pid_file race condition, a local user can delete arbitrary files as root. This involves the -oP and -oPX options.

Record
CVE-2021-27216
Updated
2026-11-02
EUVDEUVD-2021-13981 No score

Exim 4 before 4.94.2 has Execution with Unnecessary Privileges. By leveraging a delete_pid_file race condition, a local user can delete arbitrary files as root. This involves the -oP and -oPX options.

Record
EUVD-2021-13981
Updated
2026-11-03
GitHub AdvisoriesGHSA-3gw6-8wwv-rhr2 6.3

Exim 4 before 4.94.2 has Execution with Unnecessary Privileges. By leveraging a delete_pid_file...

Exim 4 before 4.94.2 has Execution with Unnecessary Privileges. By leveraging a delete_pid_file race condition, a local user can delete arbitrary files as root. This involves the -oP and -oPX options.

Record
GHSA-3gw6-8wwv-rhr2
CVSS 3.1
6.3 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H
Weakness
CWE-269
Updated
2026-11-02
OSVALPINE-CVE-2021-27216 6.3

Exim 4 before 4.94.2 has Execution with Unnecessary Privileges. By leveraging a delete_pid_file race condition, a local user can delete arbitrary files as root. This involves the -oP and -oPX options.

Record
ALPINE-CVE-2021-27216
CVSS 3.1
6.3 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-03
OSV 6.3

Exim 4 before 4.94.2 has Execution with Unnecessary Privileges. By leveraging a delete_pid_file race condition, a local user can delete arbitrary files as root. This involves the -oP and -oPX options.

Record
CVE-2021-27216
CVSS 3.1
6.3 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
Show 5 moreShow less
OSVDEBIAN-CVE-2021-27216 6.3

Exim 4 before 4.94.2 has Execution with Unnecessary Privileges. By leveraging a delete_pid_file race condition, a local user can delete arbitrary files as root. This involves the -oP and -oPX options.

Record
DEBIAN-CVE-2021-27216
CVSS 3.1
6.3 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2021-27216 6.3

Exim 4 before 4.94.2 has Execution with Unnecessary Privileges. By leveraging a delete_pid_file race condition, a local user can delete arbitrary files as root. This involves the -oP and -oPX options.

Record
UBUNTU-CVE-2021-27216
CVSS 3.1
6.3 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVCLSA-2021-1640271821 No score

Fix CVE(s): CVE-2020-28024, CVE-2020-28025, CVE-2020-28026, CVE-2020-28020, CVE-2020-28021, CVE-2020-28022, CVE-2020-28011, CVE-2020-28013, CVE-2020-28012, CVE-2020-28015, CVE-2020-28007, CVE-2020-28017, CVE-2021-27216, CVE-2020-28008, CVE-2020-28009, CVE-2020-28014

  • SECURITY UPDATE: Multiple security issues
    • debian/patches/CVE-2020-28007.patch
    • debian/patches/CVE-2020-28008.patch
    • debian/patches/CVE-2020-28009.patch
    • debian/patches/CVE-2020-28011.patch
    • debian/patches/CVE-2020-28012.patch
    • debian/patches/CVE-2020-28013.patch
    • debian/patches/CVE-2020-28014+CVE-2021-27216.patch
    • debian/patches/CVE-2020-28015+28021.patch
    • debian/patches/CVE-2020-28017.patch
    • debian/patches/CVE-2020-28020.patch
    • debian/patches/CVE-2020-28022.patch
    • debian/patches/CVE-2020-28024.patch
    • debian/patches/CVE-2020-28025.patch
    • debian/patches/CVE-2020-28026.patch: backport patches from upstream to correct issues.
    • CVE-2020-28007, CVE-2020-28008, CVE-2020-28009, CVE-2020-28011, CVE-2020-28012, CVE-2020-28013, CVE-2020-28014, CVE-2020-28015, CVE-2020-28017, CVE-2020-28020, CVE-2020-28021, CVE-2020-28022, CVE-2020-28024, CVE-2020-28025, CVE-2020-28026, CVE-2021-27216
Record
CLSA-2021-1640271821
Updated
2026-11-02
OSVUSN-4934-1 No score

exim4 vulnerabilities

It was discovered that Exim contained multiple security issues. An attacker could use these issues to cause a denial of service, execute arbitrary code remotely, obtain sensitive information, or escalate local privileges.

Record
USN-4934-1
Updated
2026-11-02
OSVUSN-4934-2 No score

exim4 vulnerabilities

USN-4934-1 fixed several vulnerabilities in Exim. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. CVE-2020-28026 only affected Ubuntu 16.04 ESM.

Original advisory details:

It was discovered that Exim contained multiple security issues. An attacker could use these issues to cause a denial of service, execute arbitrary code remotely, obtain sensitive information, or escalate local privileges.

Record
USN-4934-2
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
exim
Alpine:v3.13
 before 4.94.2-r0
4.94.2-r0
exim
Alpine:v3.14
 before 4.94.2-r0
4.94.2-r0
exim
Alpine:v3.15
 before 4.94.2-r0
4.94.2-r0
exim
Alpine:v3.16
 before 4.94.2-r0
4.94.2-r0
exim
Alpine:v3.17
 before 4.94.2-r0
4.94.2-r0
exim
Alpine:v3.18
 before 4.94.2-r0
4.94.2-r0
exim
Alpine:v3.19
 before 4.94.2-r0
4.94.2-r0
exim
Alpine:v3.20
 before 4.94.2-r0
4.94.2-r0
exim
Alpine:v3.21
 before 4.94.2-r0
4.94.2-r0
exim
Alpine:v3.22
 before 4.94.2-r0
4.94.2-r0
Show 20 moreShow less
Affected packages
PackageAffectedFixed
exim
Alpine:v3.23
 before 4.94.2-r0
4.94.2-r0
exim
Alpine:v3.24
 before 4.94.2-r0
4.94.2-r0
exim4
TuxCare:Ubuntu:16.04
From an advisory covering 16 CVEs
 before 4.86.2-2ubuntu2.6+tuxcare.els1
4.86.2-2ubuntu2.6+tuxcare.els1
exim4-base
TuxCare:Ubuntu:16.04
From an advisory covering 16 CVEs
 before 4.86.2-2ubuntu2.6+tuxcare.els1
4.86.2-2ubuntu2.6+tuxcare.els1
exim4-config
TuxCare:Ubuntu:16.04
From an advisory covering 16 CVEs
 before 4.86.2-2ubuntu2.6+tuxcare.els1
4.86.2-2ubuntu2.6+tuxcare.els1
exim4-daemon-heavy
TuxCare:Ubuntu:16.04
From an advisory covering 16 CVEs
 before 4.86.2-2ubuntu2.6+tuxcare.els1
4.86.2-2ubuntu2.6+tuxcare.els1
exim4-daemon-light
TuxCare:Ubuntu:16.04
From an advisory covering 16 CVEs
 before 4.86.2-2ubuntu2.6+tuxcare.els1
4.86.2-2ubuntu2.6+tuxcare.els1
exim4-dev
TuxCare:Ubuntu:16.04
From an advisory covering 16 CVEs
 before 4.86.2-2ubuntu2.6+tuxcare.els1
4.86.2-2ubuntu2.6+tuxcare.els1
eximon4
TuxCare:Ubuntu:16.04
From an advisory covering 16 CVEs
 before 4.86.2-2ubuntu2.6+tuxcare.els1
4.86.2-2ubuntu2.6+tuxcare.els1
exim4
Debian:12
 before 4.94.2-1
4.94.2-1
exim4
Debian:13
 before 4.94.2-1
4.94.2-1
exim4
Debian:14
 before 4.94.2-1
4.94.2-1
exim4
Ubuntu:Pro:14.04:LTS
 before 4.82-3ubuntu2.4+esm3, plus listed versions
4.80-7ubuntu34.80-7ubuntu44.80-9ubuntu14.80-9ubuntu24.82-3ubuntu1
Show 7 moreShow less
4.82-3ubuntu24.82-3ubuntu2.14.82-3ubuntu2.24.82-3ubuntu2.34.82-3ubuntu2.44.82-3ubuntu2.4+esm14.82-3ubuntu2.4+esm2
4.82-3ubuntu2.4+esm3
exim4
Ubuntu:Pro:16.04:LTS
 before 4.86.2-2ubuntu2.6+esm1, plus listed versions
4.86-3ubuntu14.86-7ubuntu14.86-7ubuntu24.86-7ubuntu34.86.2-2ubuntu1
Show 7 moreShow less
4.86.2-2ubuntu24.86.2-2ubuntu2.14.86.2-2ubuntu2.24.86.2-2ubuntu2.34.86.2-2ubuntu2.44.86.2-2ubuntu2.54.86.2-2ubuntu2.6
4.86.2-2ubuntu2.6+esm1
exim4
Ubuntu:18.04:LTS
 before 4.90.1-1ubuntu1.8, plus listed versions
4.89-5ubuntu14.89-9ubuntu14.89-9ubuntu24.89-9ubuntu34.89-9ubuntu4
Show 6 moreShow less
4.90.1-1ubuntu14.90.1-1ubuntu1.14.90.1-1ubuntu1.24.90.1-1ubuntu1.34.90.1-1ubuntu1.44.90.1-1ubuntu1.5
4.90.1-1ubuntu1.8
exim4
Ubuntu:20.04:LTS
 before 4.93-13ubuntu1.5, plus listed versions
4.92.1-1ubuntu34.92.1-1ubuntu44.93~RC2-1ubuntu14.93-9ubuntu14.93-11ubuntu14.93-12ubuntu14.93-13ubuntu14.93-13ubuntu1.1
4.93-13ubuntu1.5
exim4
Ubuntu:18.04:LTS
From an advisory covering 20 CVEs
 before 4.90.1-1ubuntu1.8, plus listed versions
4.89-5ubuntu14.89-9ubuntu14.89-9ubuntu24.89-9ubuntu34.89-9ubuntu4
Show 6 moreShow less
4.90.1-1ubuntu14.90.1-1ubuntu1.14.90.1-1ubuntu1.24.90.1-1ubuntu1.34.90.1-1ubuntu1.44.90.1-1ubuntu1.5
4.90.1-1ubuntu1.8
exim4
Ubuntu:20.04:LTS
From an advisory covering 20 CVEs
 before 4.93-13ubuntu1.5, plus listed versions
4.92.1-1ubuntu34.92.1-1ubuntu44.93~RC2-1ubuntu14.93-9ubuntu14.93-11ubuntu14.93-12ubuntu14.93-13ubuntu14.93-13ubuntu1.1
4.93-13ubuntu1.5
exim4
Ubuntu:Pro:14.04:LTS
From an advisory covering 15 CVEs
 before 4.82-3ubuntu2.4+esm3, plus listed versions
4.80-7ubuntu34.80-7ubuntu44.80-9ubuntu14.80-9ubuntu24.82-3ubuntu1
Show 7 moreShow less
4.82-3ubuntu24.82-3ubuntu2.14.82-3ubuntu2.24.82-3ubuntu2.34.82-3ubuntu2.44.82-3ubuntu2.4+esm14.82-3ubuntu2.4+esm2
4.82-3ubuntu2.4+esm3
exim4
Ubuntu:Pro:16.04:LTS
From an advisory covering 15 CVEs
 before 4.86.2-2ubuntu2.6+esm1, plus listed versions
4.86-3ubuntu14.86-7ubuntu14.86-7ubuntu24.86-7ubuntu34.86.2-2ubuntu1
Show 7 moreShow less
4.86.2-2ubuntu24.86.2-2ubuntu2.14.86.2-2ubuntu2.24.86.2-2ubuntu2.34.86.2-2ubuntu2.44.86.2-2ubuntu2.54.86.2-2ubuntu2.6
4.86.2-2ubuntu2.6+esm1

History

History
RecordedChangedSources
affected, facts
affected, aliases, referencesOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-27216 is a medium vulnerability (CVSS 6.3) in Exim, published May 4, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.98%, the 62nd percentile. Fixed in exim 4.94.2-r0.

References

Show 24 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open