CVE-2024-28054
Amavis before 2.12.3 and 2.13.x before 2.13.1, in part because of its use of MIME-tools, has an Interpretation Conflict (relative to some mail user ag...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Amavis before 2.12.3 and 2.13.x before 2.13.1, in part because of its use of MIME-tools, has an Interpretation Conflict (relative to some mail user agents) when there are multiple boundary parameters in a MIME email message. Consequently, there can be an incorrect check for banned files or malware.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Alpine Linux ALPINE-CVE-2024-28054 amavis Corrigé dans: 2.13.1-r0
- Debian DEBIAN-CVE-2024-28054 amavisd-new Corrigé dans: 1:2.11.1-5+deb11u1
Références
- advisory github.com
- advisory lists.fedoraproject.org
- advisory lists.fedoraproject.org
- advisory lists.fedoraproject.org
- advisory nvd.nist.gov
- report gitlab.com
- web gitlab.com
- web lists.amavis.org
- web lists.fedoraproject.org
- web lists.fedoraproject.org
- web metacpan.org
- web amavis.org