A use-after-free in Exim 4.96 through 4.98.1 could allow users (with command-line access) to escalate privileges.

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1783707452 advisory.

  - A use-after-free in Exim 4.96 through 4.98.1 could allow users (with command-line access) to escalate     privileges. (CVE-2025-30232)

  - A use-after-free is possible, with potential for privilege escalation in Exim versions 4.96, 4.97, 4.98     and 4.98.1. Command-line access is also required for exploitation. (CVE-2025-30232)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202608-07 (Exim: Multiple Vulnerabilities)

    Multiple vulnerabilities have been discovered in Exim. Please review the CVE identifiers referenced below     for details.

Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A use-after-free in Exim 4.96 through 4.98.1 could allow users (with command-line access) to escalate
    privileges. (CVE-2025-30232)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-ab7148736c advisory.

    This is an update fixing CVE 2025-30232.


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-3a56fe6159 advisory.

    This is an update fixing CVE 2025-30232.


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 24.04 LTS / 24.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7373-1 advisory.

    It was discovered that Exim incorrectly handled certain memory operations. A remote attacker could use     this issue to cause Exim to crash, resulting in a denial of service, or possibly execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5887 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5887-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     March 26, 2025                        https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : exim4     CVE ID         : CVE-2025-30232

    It was discovered that a use-after-free vulnerability in Exim4, a mail     transport agent, may result in privilege escalation for a local     attacker.

    For the stable distribution (bookworm), this problem has been fixed in     version 4.96-15+deb12u7.

    We recommend that you upgrade your exim4 packages.

    For the detailed security status of exim4 please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/exim4

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
361191	CentOS Linux 7 [TuxCare] Security Update: exim / exim-greylist / exim-mon / exim-mysql / exim-pgsql / etc (CENTOS7:CLSA-2026:1783707452)	Nessus	CentOS Local Security Checks	Local	high
335323	GLSA-202608-07 : Exim: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	Local	critical
426578	Alpine: multiple exim packages: security update to 4.98.2-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	Local	high
426578	Alpine: multiple exim packages: security update to 4.98.2-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	Local	high
233881	Fedora 41 : exim (2025-ab7148736c)	Nessus	Fedora Local Security Checks	Local	high
233878	Fedora 40 : exim (2025-3a56fe6159)	Nessus	Fedora Local Security Checks	Local	high
233371	Ubuntu 24.04 LTS / 24.10 : Exim vulnerability (USN-7373-1)	Nessus	Ubuntu Local Security Checks	Local	critical
233361	Debian dsa-5887 : exim4 - security update	Nessus	Debian Local Security Checks	Local	critical

Detections

Analytics

CVE-2025-30232

high

Tenable Plugins

high

critical

high

high

high

high

critical

critical