CVE-2016-1531: exim
CVSS: 7.0v3.0HighModified
AliasesUBUNTU-CVE-2016-1531DEBIAN-CVE-2016-1531DSA-3517-1
Published 07-04-2016Last modified 05-08-2024
Vulnerability summary
CVE-2016-1531 is a high (CVSS 7.0) vulnerability in exim. EPSS estimates a 6.27% chance of exploitation in the next 30 days, higher than 93.5% of scored vulnerabilities. 5 public exploits are recorded.
CVSS score
7.0/10
010
High · v3.0 (NVD)EPSS score
6.27%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits5reference, exploit-database, metasploit
Advisory lineage
Upstream 0 · Downstream 2 · Related 2Timeline
- 07-04-2016PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
Exim before 4.86.2, when installed setuid root, allows local users to gain privileges via the perl_startup argument.
CVSS metrics
4 scores · 3 sources · 2 versionsHigh 7.0Preferred score · NVD (NIST)
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HSourcesAll 3 agree
- OSV · UbuntuEcosystem advisory · calculated7.0HighCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.0HighCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Medium 6.9Preferred score · NVD (NIST)
AV:L/AC:M/Au:N/C:C/I:C/A:CSourcesSingle source
EPSS trend
Probability
6.27%
Chance of exploitation in the next 30 days
Percentile
94%
Versus all other CVEs
30-day change
0.00 pp
From 6.27% on 19-09-2026
19-09-202619-10-2026
EPSS score6.27%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
5 foundExploit Reference (packetstormsecurity.com)
Maturity: unknown
Exim - 'perl_startup' Local Privilege Escalation (Metasploit)
Maturity: weaponized
Exim 4.84-3 - Local Privilege Escalation
Maturity: weaponized
Weaknesses
CWE · root causeAffected systems
Debian1 product
- exim4< 4.86.2-1 | < 4.80-7+deb7u2 | < 4.84.2-1
Exim1 product
- exim≤ 4.86
Ubuntu1 product
- exim4< 4.82-3ubuntu2.1
3 vendors · 3 products
References
15 links
- packetstormsecurity.com/files/136124/Exim-4.84-3-Local-Root-Privilege-Escalation.htmlX Refsource MISCExploit
- www.exim.org/static/doc/CVE-2016-1531.txtX Refsource CONFIRMThird Party AdvisoryUS Government Resource
- www.rapid7.com/db/modules/exploit/unix/local/exim_perl_startupX Refsource MISC