CVE-2018-11781 Apache SpamAssassin 3.4.2 fixes a local user code injection in the meta rule syntax

Description

Apache SpamAssassin 3.4.2 fixes a local user code injection in the meta rule syntax.

Affected products and versions

Product	Affected versions	Fixed in
Apache SpamAssassin	Versions not published

Other CVEs of Apache SpamAssassin

The 6 CVEs of Apache SpamAssassin →

CVE-2020-1946 In Apache SpamAssassin before 3.4.5, malicious rule configuration (.cf) files can be configured to run system commands… Not rated CVE-2020-1930 A command execution issue was found in Apache SpamAssassin prior to 3.4.3 Not rated CVE-2020-1931 A command execution issue was found in Apache SpamAssassin prior to 3.4.3 Not rated CVE-2017-15705 A denial of service vulnerability was identified that exists in Apache SpamAssassin before 3.4.2 Not rated