CVE-2024-28054
Amavis before 2.12.3 and 2.13.x before 2.13.1, in part because of its use of MIME-tools, has an Interpretation Conflict (relative to some mail user ag...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Amavis before 2.12.3 and 2.13.x before 2.13.1, in part because of its use of MIME-tools, has an Interpretation Conflict (relative to some mail user agents) when there are multiple boundary parameters in a MIME email message. Consequently, there can be an incorrect check for banned files or malware.
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Alpine Linux ALPINE-CVE-2024-28054 amavis 修正版: 2.13.1-r0
- Debian DEBIAN-CVE-2024-28054 amavisd-new 修正版: 1:2.11.1-5+deb11u1
参照URL
- advisory github.com
- advisory lists.fedoraproject.org
- advisory lists.fedoraproject.org
- advisory lists.fedoraproject.org
- advisory nvd.nist.gov
- report gitlab.com
- web gitlab.com
- web lists.amavis.org
- web lists.fedoraproject.org
- web lists.fedoraproject.org
- web metacpan.org
- web amavis.org