CVE-2020-28012 Information disclosure in n/a

High 7.8 Published 6 May 2021 Updated 4 Aug 2024

Exim mail server exposes file descriptors to unintended processes due to missing close-on-exec flags, potentially leaking sensitive data.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: Available

What is CVE-2020-28012?

CVE-2020-28012 is a high-severity vulnerability in Exim Exim, published on 6 May 2021. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Exim 4 before 4.94.2 allows Exposure of File Descriptor to Unintended Control Sphere because rda_interpret uses a privileged pipe that lacks a close-on-exec flag.

Which versions are affected by CVE-2020-28012?

It affects 1 product.

Products include Exim Exim.

How do I fix CVE-2020-28012?

Upgrade to a fixed version.

Is CVE-2020-28012 being exploited?

There is no known exploitation of CVE-2020-28012 in the wild and no public exploit code.

All Exim Exim vulnerabilities

Sources

Also known as CLEANSTART-2025-BE51166, DEBIAN-CVE-2020-28012, GHSA-x2v4-6r37-4qq5, UBUNTU-CVE-2020-28012.