CVE-2020-28015

Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.94.2

Description The issue is related to insufficient input validation in the Exim message relay agent, which can be exploited to bypass security restrictions and execute arbitrary commands. Local users can alter the behavior of root processes because a recipient address can have a newline character.

Recommendations For Exim versions prior to 4.94.2, update to version 4.94.2 or later to resolve the issue. As a temporary workaround, consider restricting the ability of local users to alter recipient addresses that may contain newline characters.