File Descriptor Exposure in Exim Mail Transfer Agent by Exim

CVE-2020-28012

What is CVE-2020-28012?

The Exim Mail Transfer Agent prior to version 4.94.2 contains a vulnerability that may allow for the exposure of a file descriptor due to a flaw in the rda_interpret function. This flaw arises from the use of a privileged pipe that does not implement a close-on-exec flag, increasing the risk of unintended control over file descriptors by malicious entities. It is critical for users of the affected versions to review their systems and apply the necessary updates to mitigate potential exploitation.

References