Non notée
CVE-2018-11781 Apache SpamAssassin 3.4.2 fixes a local user code injection in the meta rule syntax
Description
Apache SpamAssassin 3.4.2 fixes a local user code injection in the meta rule syntax.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apache SpamAssassin | Versions non publiées |
Références
- USN-3811-3 usn.ubuntu.com
- USN-3811-1 usn.ubuntu.com
- GLSA-201812-07 security.gentoo.org
- [announce] 20180916 [SECURITY] Apache SpamAssassin 3.4.2 resolves CVE-2017-15705, CVE-2016-1238, CVE-2018-11780 & CVE-2018-11781 lists.apache.org
- RHSA-2018:2916 access.redhat.com
- [debian-lts-announce] 20181113 [SECURITY] [DLA 1578-1] spamassassin security update lists.debian.org
- openSUSE-SU-2019:1831 lists.opensuse.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Apache SpamAssassin
Les 6 CVE de Apache SpamAssassin →
CVE-2020-1946
In Apache SpamAssassin before 3.4.5, malicious rule configuration (.cf) files can be configured to run system commands…
Non notée
CVE-2020-1930
A command execution issue was found in Apache SpamAssassin prior to 3.4.3
Non notée
CVE-2020-1931
A command execution issue was found in Apache SpamAssassin prior to 3.4.3
Non notée
CVE-2017-15705
A denial of service vulnerability was identified that exists in Apache SpamAssassin before 3.4.2
Non notée