{"id":"CVE-2021-27216","aliases":["ALPINE-CVE-2021-27216","CLSA-2021-1640271821","DEBIAN-CVE-2021-27216","EUVD-2021-13981","GHSA-3gw6-8wwv-rhr2","UBUNTU-CVE-2021-27216","USN-4934-1","USN-4934-2"],"status":"published","title":"Exim 4 before 4.94.2 has Execution with Unnecessary Privileges. By leveraging a delete_pid_file...","description":"Exim 4 before 4.94.2 has Execution with Unnecessary Privileges. By leveraging a delete_pid_file race condition, a local user can delete arbitrary files as root. This involves the -oP and -oPX options.","severity":{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00976,"percentile":0.62553,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-269","CWE-362"],"published":"2021-05-04T13:30:00Z","modified":"2026-11-03T06:32:38Z","fixes":[{"ecosystem":"Alpine:v3.13","package":"exim","fixed_in":["4.94.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"exim","fixed_in":["4.94.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"exim","fixed_in":["4.94.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"exim","fixed_in":["4.94.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"exim","fixed_in":["4.94.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"exim","fixed_in":["4.94.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"exim","fixed_in":["4.94.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"exim","fixed_in":["4.94.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"exim","fixed_in":["4.94.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"exim","fixed_in":["4.94.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"exim","fixed_in":["4.94.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"exim","fixed_in":["4.94.2-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"exim4","fixed_in":["4.94.2-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"exim4","fixed_in":["4.94.2-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"exim4","fixed_in":["4.94.2-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"exim4","fixed_in":["4.82-3ubuntu2.4+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"exim4","fixed_in":["4.86.2-2ubuntu2.6+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"exim4","fixed_in":["4.90.1-1ubuntu1.8"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"exim4","fixed_in":["4.93-13ubuntu1.5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.13","package":"exim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.94.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"exim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.94.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"exim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.94.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"exim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.94.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"exim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.94.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"exim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.94.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"exim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.94.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"exim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.94.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"exim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.94.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"exim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.94.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"exim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.94.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"exim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.94.2-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.86.2-2ubuntu2.6+tuxcare.els1"}]}],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"exim4-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.86.2-2ubuntu2.6+tuxcare.els1"}]}],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"exim4-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.86.2-2ubuntu2.6+tuxcare.els1"}]}],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"exim4-daemon-heavy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.86.2-2ubuntu2.6+tuxcare.els1"}]}],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"exim4-daemon-light","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.86.2-2ubuntu2.6+tuxcare.els1"}]}],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"exim4-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.86.2-2ubuntu2.6+tuxcare.els1"}]}],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"eximon4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.86.2-2ubuntu2.6+tuxcare.els1"}]}],"bundled":16},{"source":"osv","ecosystem":"Debian:12","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.94.2-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.94.2-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.94.2-1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.82-3ubuntu2.4+esm3"}]}],"versions":["4.80-7ubuntu3","4.80-7ubuntu4","4.80-9ubuntu1","4.80-9ubuntu2","4.82-3ubuntu1","4.82-3ubuntu2","4.82-3ubuntu2.1","4.82-3ubuntu2.2","4.82-3ubuntu2.3","4.82-3ubuntu2.4","4.82-3ubuntu2.4+esm1","4.82-3ubuntu2.4+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.86.2-2ubuntu2.6+esm1"}]}],"versions":["4.86-3ubuntu1","4.86-7ubuntu1","4.86-7ubuntu2","4.86-7ubuntu3","4.86.2-2ubuntu1","4.86.2-2ubuntu2","4.86.2-2ubuntu2.1","4.86.2-2ubuntu2.2","4.86.2-2ubuntu2.3","4.86.2-2ubuntu2.4","4.86.2-2ubuntu2.5","4.86.2-2ubuntu2.6"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.90.1-1ubuntu1.8"}]}],"versions":["4.89-5ubuntu1","4.89-9ubuntu1","4.89-9ubuntu2","4.89-9ubuntu3","4.89-9ubuntu4","4.90.1-1ubuntu1","4.90.1-1ubuntu1.1","4.90.1-1ubuntu1.2","4.90.1-1ubuntu1.3","4.90.1-1ubuntu1.4","4.90.1-1ubuntu1.5"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.93-13ubuntu1.5"}]}],"versions":["4.92.1-1ubuntu3","4.92.1-1ubuntu4","4.93~RC2-1ubuntu1","4.93-9ubuntu1","4.93-11ubuntu1","4.93-12ubuntu1","4.93-13ubuntu1","4.93-13ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.90.1-1ubuntu1.8"}]}],"versions":["4.89-5ubuntu1","4.89-9ubuntu1","4.89-9ubuntu2","4.89-9ubuntu3","4.89-9ubuntu4","4.90.1-1ubuntu1","4.90.1-1ubuntu1.1","4.90.1-1ubuntu1.2","4.90.1-1ubuntu1.3","4.90.1-1ubuntu1.4","4.90.1-1ubuntu1.5"],"bundled":20},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.93-13ubuntu1.5"}]}],"versions":["4.92.1-1ubuntu3","4.92.1-1ubuntu4","4.93~RC2-1ubuntu1","4.93-9ubuntu1","4.93-11ubuntu1","4.93-12ubuntu1","4.93-13ubuntu1","4.93-13ubuntu1.1"],"bundled":20},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.82-3ubuntu2.4+esm3"}]}],"versions":["4.80-7ubuntu3","4.80-7ubuntu4","4.80-9ubuntu1","4.80-9ubuntu2","4.82-3ubuntu1","4.82-3ubuntu2","4.82-3ubuntu2.1","4.82-3ubuntu2.2","4.82-3ubuntu2.3","4.82-3ubuntu2.4","4.82-3ubuntu2.4+esm1","4.82-3ubuntu2.4+esm2"],"bundled":15},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.86.2-2ubuntu2.6+esm1"}]}],"versions":["4.86-3ubuntu1","4.86-7ubuntu1","4.86-7ubuntu2","4.86-7ubuntu3","4.86.2-2ubuntu1","4.86.2-2ubuntu2","4.86.2-2ubuntu2.1","4.86.2-2ubuntu2.2","4.86.2-2ubuntu2.3","4.86.2-2ubuntu2.4","4.86.2-2ubuntu2.5","4.86.2-2ubuntu2.6"],"bundled":15}],"products":[{"vendor":"exim","product":"exim"}],"references":[{"url":"https://www.exim.org/static/doc/security/CVE-2020-qualys/CVE-2020-28007-LFDIR.txt","tags":["x_refsource_MISC","x_transferred","Exploit","Vendor Advisory","evidence"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-27216"},{"url":"https://github.com/advisories/GHSA-3gw6-8wwv-rhr2"},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-27216","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16_04/CLSA-2021-1640271821","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-27216","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-27216","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4934-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4934-2","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-27216","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-28007","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-28008","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-28009","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-28010","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-28011","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-28012","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-28013","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-28014","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-28015","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-28016","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-28017","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-28018","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-28019","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-28020","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-28021","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-28022","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-28023","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-28024","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-28025","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-28026","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2021-27216","description":"Exim 4 before 4.94.2 has Execution with Unnecessary Privileges. By leveraging a delete_pid_file race condition, a local user can delete arbitrary files as root. This involves the -oP and -oPX options.","status":"published","published":"2021-05-06T04:44:50Z","modified":"2024-08-03T20:40:47.403Z","updated_at":"2026-11-02T14:33:04.679189Z"}],"euvd":[{"id":"EUVD-2021-13981","description":"Exim 4 before 4.94.2 has Execution with Unnecessary Privileges. By leveraging a delete_pid_file race condition, a local user can delete arbitrary files as root. This involves the -oP and -oPX options.","status":"published","published":"2021-05-06T04:44:50Z","modified":"2024-08-03T20:40:47Z","updated_at":"2026-11-03T03:24:49.808499Z"}],"ghsa":[{"id":"GHSA-3gw6-8wwv-rhr2","title":"Exim 4 before 4.94.2 has Execution with Unnecessary Privileges. By leveraging a delete_pid_file...","description":"Exim 4 before 4.94.2 has Execution with Unnecessary Privileges. By leveraging a delete_pid_file race condition, a local user can delete arbitrary files as root. This involves the -oP and -oPX options.","status":"published","published":"2022-05-24T19:01:31Z","modified":"2023-01-27T05:02:46Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"medium"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:42:06.500861Z"}],"nvd":[{"id":"CVE-2021-27216","description":"Exim 4 before 4.94.2 has Execution with Unnecessary Privileges. By leveraging a delete_pid_file race condition, a local user can delete arbitrary files as root. This involves the -oP and -oPX options.","status":"published","published":"2021-05-06T13:15:12.447Z","modified":"2026-06-17T03:44:29.01Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":6.3,"vector":"AV:L/AC:M/Au:N/C:N/I:C/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-362"],"updated_at":"2026-11-02T14:06:52.81233Z"}],"osv":[{"id":"ALPINE-CVE-2021-27216","description":"Exim 4 before 4.94.2 has Execution with Unnecessary Privileges. By leveraging a delete_pid_file race condition, a local user can delete arbitrary files as root. This involves the -oP and -oPX options.","status":"published","published":"2021-05-06T13:15:12.447Z","modified":"2026-11-03T06:32:38.625812576Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"medium"}],"updated_at":"2026-11-03T07:17:20.312441Z"},{"id":"CVE-2021-27216","description":"Exim 4 before 4.94.2 has Execution with Unnecessary Privileges. By leveraging a delete_pid_file race condition, a local user can delete arbitrary files as root. This involves the -oP and -oPX options.","status":"published","published":"2021-05-06T13:15:12.447Z","modified":"2026-10-24T14:06:56.22706395Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:18.778776Z"},{"id":"DEBIAN-CVE-2021-27216","description":"Exim 4 before 4.94.2 has Execution with Unnecessary Privileges. By leveraging a delete_pid_file race condition, a local user can delete arbitrary files as root. This involves the -oP and -oPX options.","status":"published","published":"2021-05-06T13:15:12.447Z","modified":"2026-10-23T18:03:25.815834922Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:34.94143Z"},{"id":"UBUNTU-CVE-2021-27216","description":"Exim 4 before 4.94.2 has Execution with Unnecessary Privileges. By leveraging a delete_pid_file race condition, a local user can delete arbitrary files as root. This involves the -oP and -oPX options.","status":"published","published":"2021-05-04T13:30:00Z","modified":"2026-04-22T12:50:30.943679Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:26.779273Z"},{"id":"CLSA-2021-1640271821","title":"Fix CVE(s): CVE-2020-28024, CVE-2020-28025, CVE-2020-28026, CVE-2020-28020, CVE-2020-28021, CVE-2020-28022, CVE-2020-28011, CVE-2020-28013, CVE-2020-28012, CVE-2020-28015, CVE-2020-28007, CVE-2020-28017, CVE-2021-27216, CVE-2020-28008, CVE-2020-28009, CVE-2020-28014","description":"\n   * SECURITY UPDATE: Multiple security issues\n     - debian/patches/CVE-2020-28007.patch\n     - debian/patches/CVE-2020-28008.patch\n     - debian/patches/CVE-2020-28009.patch\n     - debian/patches/CVE-2020-28011.patch\n     - debian/patches/CVE-2020-28012.patch\n     - debian/patches/CVE-2020-28013.patch\n     - debian/patches/CVE-2020-28014+CVE-2021-27216.patch\n     - debian/patches/CVE-2020-28015+28021.patch\n     - debian/patches/CVE-2020-28017.patch\n     - debian/patches/CVE-2020-28020.patch\n     - debian/patches/CVE-2020-28022.patch\n     - debian/patches/CVE-2020-28024.patch\n     - debian/patches/CVE-2020-28025.patch\n     - debian/patches/CVE-2020-28026.patch: backport patches from upstream to\n       correct issues.\n     - CVE-2020-28007, CVE-2020-28008, CVE-2020-28009,\n       CVE-2020-28011, CVE-2020-28012, CVE-2020-28013, CVE-2020-28014,\n       CVE-2020-28015, CVE-2020-28017,\n       CVE-2020-28020, CVE-2020-28021, CVE-2020-28022,\n       CVE-2020-28024, CVE-2020-28025, CVE-2020-28026,\n       CVE-2021-27216","status":"published","published":"2021-12-23T15:03:41Z","modified":"2026-06-04T10:04:27.937397297Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"USN-4934-1","title":"exim4 vulnerabilities","description":"It was discovered that Exim contained multiple security issues. An attacker\ncould use these issues to cause a denial of service, execute arbitrary\ncode remotely, obtain sensitive information, or escalate local privileges.\n","status":"published","published":"2021-05-04T14:00:04Z","modified":"2026-04-22T10:13:37.860318Z","updated_at":"2026-11-02T16:58:15.159055Z"},{"id":"USN-4934-2","title":"exim4 vulnerabilities","description":"USN-4934-1 fixed several vulnerabilities in Exim. This update provides\nthe corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.\nCVE-2020-28026 only affected Ubuntu 16.04 ESM.\n\nOriginal advisory details:\n\n It was discovered that Exim contained multiple security issues. An attacker\n could use these issues to cause a denial of service, execute arbitrary\n code remotely, obtain sensitive information, or escalate local privileges.\n","status":"published","published":"2021-05-06T11:23:36Z","modified":"2026-06-29T13:48:55.383664747Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}