kritik
CVE-2018-11780
spamassassin: Potential remote code execution vulnerability in PDFInfo plugin
En geç 24 Eki 2026, 07:11 UTC tarihinden beri Trivy database'indeO derlemeden önce ne zaman girdiği kayıtlı değil.
Kaynağa göre önem derecesi
NVD9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat8.1CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD. Daha düşük diyenler: Red Hat (yüksek), Amazon (yüksek), Ubuntu (orta).
Açıklama
A potential Remote Code Execution bug exists with the PDFInfo plugin in Apache SpamAssassin before 3.4.2.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| alpine 3.10 | spamassassin | 3.4.2-r0 |
| alpine 3.11 | spamassassin | 3.4.2-r0 |
| alpine 3.12 | spamassassin | 3.4.2-r0 |
| alpine 3.13 | spamassassin | 3.4.2-r0 |
| alpine 3.14 | spamassassin | 3.4.2-r0 |
| alpine 3.15 | spamassassin | 3.4.2-r0 |
| alpine 3.16 | spamassassin | 3.4.2-r0 |
| alpine 3.17 | spamassassin | 3.4.2-r0 |
| alpine 3.18 | spamassassin | 3.4.2-r0 |
| alpine 3.19 | spamassassin | 3.4.2-r0 |
| alpine 3.20 | spamassassin | 3.4.2-r0 |
| alpine 3.21 | spamassassin | 3.4.2-r0 |
32 kaynaktaki 33 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| alpine 3.10 | spamassassin | 3.4.2-r0 |
| alpine 3.11 | spamassassin | 3.4.2-r0 |
| alpine 3.12 | spamassassin | 3.4.2-r0 |
| alpine 3.13 | spamassassin | 3.4.2-r0 |
| alpine 3.14 | spamassassin | 3.4.2-r0 |
| alpine 3.15 | spamassassin | 3.4.2-r0 |
| alpine 3.16 | spamassassin | 3.4.2-r0 |
| alpine 3.17 | spamassassin | 3.4.2-r0 |
| alpine 3.18 | spamassassin | 3.4.2-r0 |
| alpine 3.19 | spamassassin | 3.4.2-r0 |
| alpine 3.20 | spamassassin | 3.4.2-r0 |
| alpine 3.21 | spamassassin | 3.4.2-r0 |
| alpine 3.22 | spamassassin | 3.4.2-r0 |
| alpine 3.23 | spamassassin | 3.4.2-r0 |
| alpine 3.24 | spamassassin | 3.4.2-r0 |
| alpine 3.8 | spamassassin | 3.4.3-r0 |
| alpine 3.9 | spamassassin | 3.4.2-r0 |
| alpine edge | spamassassin | 3.4.2-r0 |
| amazon linux 1 | spamassassin | 3.4.2-2.14.amzn1 |
| amazon linux 1 | spamassassin-debuginfo | 3.4.2-2.14.amzn1 |
| debian 11 | spamassassin | 3.4.2-1 |
| debian 12 | spamassassin | 3.4.2-1 |
| debian 13 | spamassassin | 3.4.2-1 |
| debian 14 | spamassassin | 3.4.2-1 |
| debian 8 | spamassassin | 3.4.2-0+deb8u1 |
| debian 9 | spamassassin | 3.4.2-1~deb9u1 |
| echo | spamassassin | 3.4.2-1 |
| ubuntu 14.04 | spamassassin | 3.4.2-0ubuntu0.14.04.1 |
| ubuntu 14.04-ESM | spamassassin | 3.4.2-0ubuntu0.14.04.1 |
| ubuntu 16.04 | spamassassin | 3.4.2-0ubuntu0.16.04.1 |
| ubuntu 16.04-ESM | spamassassin | 3.4.2-0ubuntu0.16.04.1 |
| ubuntu 18.04 | spamassassin | 3.4.2-0ubuntu0.18.04.1 |
| ubuntu 18.04-ESM | spamassassin | 3.4.2-0ubuntu0.18.04.1 |
Referanslar
- http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00002.html
- http://www.securityfocus.com/bid/105373
- https://access.redhat.com/security/cve/CVE-2018-11780
- https://lists.apache.org/thread.html/7f6a16bc0fd0fd5e67c7fd95bd655069a2ac7d1f88e42d3c853e601c@%3Cannounce.apache.org%3E
- https://lists.debian.org/debian-lts-announce/2018/11/msg00016.html
- https://mail-archives.apache.org/mod_mbox/spamassassin-announce/201809.mbox/raw/%3Cc57c0f41-742c-3c3e-249c-ae2614bf0d7d@apache.org%3E/
- https://nvd.nist.gov/vuln/detail/CVE-2018-11780
- https://security.gentoo.org/glsa/201812-07