High severity8.4NVD Advisory· Published Apr 2, 2020· Updated Jun 17, 2026

CVE-2020-8015

Description

A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of exim in openSUSE Factory allows local attackers to escalate from user mail to root. This issue affects: openSUSE Factory exim versions prior to 4.93.0.4-3.1.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Exim/Exim
cpe:2.3:a:exim:exim:*:*:*:*:*:*:*:*
Range: <4.93.0.4-3.1
OpenSUSE/eximllm-create
Range: <4.93.0.4-3.1
osv-coords4 versions
pkg:rpm/opensuse/exim&distro=openSUSE%20Leap%2015.1 pkg:rpm/opensuse/exim&distro=openSUSE%20Tumbleweed pkg:rpm/suse/exim&distro=SUSE%20Package%20Hub%2015%20SP1 pkg:rpm/suse/libspf2&distro=SUSE%20Package%20Hub%2015%20SP1
< 4.88-lp151.4.12.1+ 3 more
- (no CPE)range: < 4.88-lp151.4.12.1
- (no CPE)range: < 4.94.2-4.2
- (no CPE)range: < 4.94.2-bp151.2.4.1
- (no CPE)range: < 1.2.10-bp151.4.1
openSUSE/Factoryv5
Range: exim

Patches

Vulnerability mechanics

References

bugzilla.suse.com/show_bug.cginvdExploitIssue TrackingVendor Advisory
lists.opensuse.org/opensuse-security-announce/2020-04/msg00010.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.546
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000