{"id":"USN-8590-1","aliases":[],"status":"published","title":"exim4 vulnerabilities","description":"It was discovered that Exim incorrectly handled certain command line\noptions. A local attacker could possibly use this issue to access files\noutside of the spool area.\n\nIt was discovered that Exim incorrectly handled string expansion in\n.local files. A local attacker could possibly use this issue to escalate\nprivileges.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2026-07-22T16:57:48Z","modified":"2026-07-29T19:59:52Z","fixes":[{"ecosystem":"Ubuntu:22.04:LTS","package":"exim4","fixed_in":["4.95-4ubuntu2.11"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"exim4","fixed_in":["4.97-4ubuntu4.7"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"exim4","fixed_in":["4.99.1-1ubuntu1.4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.95-4ubuntu2.11"}]}],"versions":["4.94.2-7ubuntu2","4.95-2ubuntu2","4.95-4ubuntu1","4.95-4ubuntu2","4.95-4ubuntu2.1","4.95-4ubuntu2.2","4.95-4ubuntu2.3","4.95-4ubuntu2.4","4.95-4ubuntu2.5","4.95-4ubuntu2.6","4.95-4ubuntu2.7","4.95-4ubuntu2.8","4.95-4ubuntu2.9","4.95-4ubuntu2.10"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.97-4ubuntu4.7"}]}],"versions":["4.96-17ubuntu2","4.96-17ubuntu2.1","4.97-3ubuntu1","4.97-4ubuntu1","4.97-4ubuntu3","4.97-4ubuntu4","4.97-4ubuntu4.1","4.97-4ubuntu4.2","4.97-4ubuntu4.3","4.97-4ubuntu4.4","4.97-4ubuntu4.5","4.97-4ubuntu4.6"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.99.1-1ubuntu1.4"}]}],"versions":["4.98.2-1ubuntu2","4.99-4ubuntu1","4.99.1-1ubuntu1","4.99.1-1ubuntu1.1","4.99.1-1ubuntu1.2","4.99.1-1ubuntu1.3"]}],"references":[{"url":"https://ubuntu.com/security/notices/USN-8590-1","tags":["advisory"]},{"url":"https://launchpad.net/bugs/2161106","tags":["report"]}],"sources":{"osv":[{"id":"USN-8590-1","title":"exim4 vulnerabilities","description":"It was discovered that Exim incorrectly handled certain command line\noptions. A local attacker could possibly use this issue to access files\noutside of the spool area.\n\nIt was discovered that Exim incorrectly handled string expansion in\n.local files. A local attacker could possibly use this issue to escalate\nprivileges.","status":"published","published":"2026-07-22T16:57:48Z","modified":"2026-07-29T19:59:52.87376284Z","updated_at":"2026-11-02T16:58:25.103481Z"}]}}