PT-2018-10818 · Apache+5 · Apache Spamassassin+5

Publicado 2018-09-17 · Atualizado 2019-08-06 · CVE-2018-11781

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Apache SpamAssassin versions prior to 3.4.2

Description A local user code injection issue exists in the meta rule syntax.

Recommendations For versions prior to 3.4.2, update to Apache SpamAssassin version 3.4.2 to resolve the issue.

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

ALT-PU-2018-2985

ALT-PU-2018-2986

CESA-2018_2916

CVE-2018-11781

DLA-1578-1

MGASA-2018-0425

OPENSUSE-SU-2019:1831-1

OPENSUSE-SU-2019_1831-1

RHSA-2018:2916

RHSA-2018_2916

SUSE-SU-2019:1961-1

SUSE-SU-2019:2011-1

USN-3811-1

USN-3811-3

Produtos afetados

Alt Linux

Apache Spamassassin

Centos

Red Hat

Suse

Ubuntu

Referências · 73

• https://ubuntu.com/security/notices/USN-3811-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2016-1238 · Nota
• https://bugzilla.suse.com/1107765 · Nota
• https://bugzilla.suse.com/1108748 · Nota
• https://ubuntu.com/security/CVE-2018-11781 · Aviso do Fabricante
• https://bugzilla.suse.com/1115411 · Nota
• https://lists.centos.org/pipermail/centos-announce/2020-February/060509.html · Nota
• https://access.redhat.com/errata/RHSA-2018:2916 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11781 · Nota de Segurança
• https://lists.centos.org/pipermail/centos-announce/2018-October/072540.html · Nota
• https://bugzilla.suse.com/1108750 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11780 · Nota de Segurança
• https://lists.centos.org/pipermail/centos-announce/2018-October/059984.html · Nota
• http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00002.html · Aviso do Fabricante
• https://suse.com/support/update/announcement/2019/suse-su-20192011-1 · Nota