Not rated
CVE-2018-11781 Apache SpamAssassin 3.4.2 fixes a local user code injection in the meta rule syntax
Description
Apache SpamAssassin 3.4.2 fixes a local user code injection in the meta rule syntax.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache SpamAssassin | Versions not published |
References
- USN-3811-3 usn.ubuntu.com
- USN-3811-1 usn.ubuntu.com
- GLSA-201812-07 security.gentoo.org
- [announce] 20180916 [SECURITY] Apache SpamAssassin 3.4.2 resolves CVE-2017-15705, CVE-2016-1238, CVE-2018-11780 & CVE-2018-11781 lists.apache.org
- RHSA-2018:2916 access.redhat.com
- [debian-lts-announce] 20181113 [SECURITY] [DLA 1578-1] spamassassin security update lists.debian.org
- openSUSE-SU-2019:1831 lists.opensuse.org
Timeline
- Published
- Last modified
Other CVEs of Apache SpamAssassin
The 6 CVEs of Apache SpamAssassin →
CVE-2020-1946
In Apache SpamAssassin before 3.4.5, malicious rule configuration (.cf) files can be configured to run system commands…
Not rated
CVE-2020-1930
A command execution issue was found in Apache SpamAssassin prior to 3.4.3
Not rated
CVE-2020-1931
A command execution issue was found in Apache SpamAssassin prior to 3.4.3
Not rated
CVE-2017-15705
A denial of service vulnerability was identified that exists in Apache SpamAssassin before 3.4.2
Not rated