CVE-2018-11781

Synopsis Important: spamassassin security update Type/Severity Security Advisory: Important Topic An update for spamassassin is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) b ...

Several security issues were fixed in SpamAssassin ...

Several security issues were fixed in SpamAssassin ...

Debian Bug report logs - #908971 spamassassin: CVE-2018-11781: local user code injection in the meta rule syntax Package: src:spamassassin; Maintainer for src:spamassassin is Noah Meyerhans <noahm@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sun, 16 Sep 2018 20:45:07 UTC Severity: grave Ta ...

Debian Bug report logs - #908969 spamassassin: CVE-2017-15705: denial of service vulnerability Package: src:spamassassin; Maintainer for src:spamassassin is Noah Meyerhans <noahm@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sun, 16 Sep 2018 20:45:02 UTC Severity: grave Tags: security, upst ...

Debian Bug report logs - #908970 spamassassin: CVE-2018-11780: potential remote code execution bug with the PDFInfo plugin Package: src:spamassassin; Maintainer for src:spamassassin is Noah Meyerhans <noahm@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sun, 16 Sep 2018 20:45:05 UTC Severity ...

A flaw was found in the way SpamAssassin processes HTML email containing unclosed HTML tags A carefully crafted mail message could cause SpamAssassin to consume significant resources If a large number of these messages are sent, a denial of service could occur potentially delaying or preventing the delivery of email(CVE-2017-15705) A flaw was f ...

A flaw was found in the way a local user on the SpamAssassin server could inject code in the meta rule syntax This could cause the arbitrary code execution on the server when these rules are being processed(CVE-2018-11781) A potential Remote Code Execution bug exists with the PDFInfo plugin in Apache SpamAssassin before 342(CVE-2018-11780) A f ...

A flaw was found in the way a local user on the SpamAssassin server could inject code in the meta rule syntax This could cause the arbitrary code execution on the server when these rules are being processed ...