Use-after-free in Exim - CVE-2025-30232

Vulnerability identifier: #VU106059

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-30232

CWE-ID: CWE-416

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the handling of the dp command line parameter. A local user with command-line access can trigger a use-after-free error and execute arbitrary code with elevated privileges.

Exim
Debian Linux
Arch Linux
Gentoo Linux
Fedora
Ubuntu
exim4 (Debian package)
exim4 (Ubuntu package)
exim4-base (Ubuntu package)
eximon4 (Ubuntu package)
exim
mail-mta/exim

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

exim4 (Debian package) - update to 4.96-15+deb12u7
exim4 (Ubuntu package) - addressed in versions 4.97-4ubuntu4.3, 4.98-1ubuntu2.1
exim4-base (Ubuntu package) - addressed in versions 4.97-4ubuntu4.3, 4.98-1ubuntu2.1
eximon4 (Ubuntu package) - addressed in versions 4.97-4ubuntu4.3, 4.98-1ubuntu2.1
exim - update to 4.98.2-1
exim - addressed in versions 4.98.2-1.el8, 4.98.2-1.el9, 4.98.2-1.fc40, 4.98.2-1.fc41, 4.98.2-1.fc42
mail-mta/exim - update to 4.99.4

• https://www.exim.org/static/doc/security/CVE-2025-30232.txt
• https://www.zerodayinitiative.com/advisories/ZDI-25-200/

• Privilege escalation in Exim
• Ubuntu update for exim4
• Fedora 42 update for exim
• Debian update for exim4
• Arch Linux update for exim
• Fedora 41 update for exim
• Fedora 40 update for exim
• Fedora EPEL 9 update for exim
• Fedora EPEL 8 update for exim
• Gentoo update for Exim