USN-8590-1
exim4 vulnerabilities
It was discovered that Exim incorrectly handled certain command line options. A local attacker could possibly use this issue to access files outside of the spool area.
It was discovered that Exim incorrectly handled string expansion in .local files. A local attacker could possibly use this issue to escalate privileges.
What each source reports
OSV No score
exim4 vulnerabilities
It was discovered that Exim incorrectly handled certain command line options. A local attacker could possibly use this issue to access files outside of the spool area.
It was discovered that Exim incorrectly handled string expansion in .local files. A local attacker could possibly use this issue to escalate privileges.
- Record
USN-8590-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
exim4Ubuntu:22.04:LTS |
before 4.95-4ubuntu2.11, plus listed versions 4.94.2-7ubuntu24.95-2ubuntu24.95-4ubuntu14.95-4ubuntu24.95-4ubuntu2.1 Show 9 moreShow less4.95-4ubuntu2.24.95-4ubuntu2.34.95-4ubuntu2.44.95-4ubuntu2.54.95-4ubuntu2.64.95-4ubuntu2.74.95-4ubuntu2.84.95-4ubuntu2.94.95-4ubuntu2.10 |
4.95-4ubuntu2.11 |
exim4Ubuntu:24.04:LTS |
before 4.97-4ubuntu4.7, plus listed versions 4.96-17ubuntu24.96-17ubuntu2.14.97-3ubuntu14.97-4ubuntu14.97-4ubuntu3 Show 7 moreShow less4.97-4ubuntu44.97-4ubuntu4.14.97-4ubuntu4.24.97-4ubuntu4.34.97-4ubuntu4.44.97-4ubuntu4.54.97-4ubuntu4.6 |
4.97-4ubuntu4.7 |
exim4Ubuntu:26.04:LTS |
before 4.99.1-1ubuntu1.4, plus listed versions 4.98.2-1ubuntu24.99-4ubuntu14.99.1-1ubuntu14.99.1-1ubuntu1.14.99.1-1ubuntu1.24.99.1-1ubuntu1.3 |
4.99.1-1ubuntu1.4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-8590-1 is a vulnerability with no CVSS score yet in exim4, published July 22, 2026. No source lists public exploit code. Fixed in exim4 4.95-4ubuntu2.11.