CVE-2020-8015: Exim

High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days.

A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of exim in openSUSE Factory allows local attackers to escalate from user mail to root. This issue affects: openSUSE Factory exim versions prior to 4.93.0.4-3.1.

Affected products

• Exim Exim: before 4.93.0.4-3.1 (fixed in 4.93.0.4-3.1)

Published 2020-04-02. Last modified 2026-06-17.