This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2016-1531 →

DEBIAN-CVE-2016-1531

Exim before 4.86.2, when installed setuid root, allows local users to gain privileges via the perl_startup argument.

Original description

The description as published by the source.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Debian:12 exim4

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.86.2-1"}]}]

Debian:13 exim4

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.86.2-1"}]}]

Debian:14 exim4

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.86.2-1"}]}]