{"id":"CVE-2018-11781","aliases":["ALPINE-CVE-2018-11781","DEBIAN-CVE-2018-11781","DLA-1578-1","EUVD-2018-3784","GHSA-qvvf-537j-pvg4","MGASA-2018-0425","RHSA-2018:2916","SUSE-SU-2019:1961-1","SUSE-SU-2019:2011-1","UBUNTU-CVE-2018-11781","USN-3811-1","openSUSE-SU-2019:1831-1"],"status":"published","title":"Apache SpamAssassin 3.4.2 fixes a local user code injection in the meta rule syntax.","description":"Apache SpamAssassin 3.4.2 fixes a local user code injection in the meta rule syntax.","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00984,"percentile":0.62574,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-94"],"published":"2018-09-17T00:00:00Z","modified":"2026-10-24T10:30:20Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"spamassassin","fixed_in":["3.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"spamassassin","fixed_in":["3.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"spamassassin","fixed_in":["3.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"spamassassin","fixed_in":["3.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"spamassassin","fixed_in":["3.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"spamassassin","fixed_in":["3.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"spamassassin","fixed_in":["3.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"spamassassin","fixed_in":["3.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"spamassassin","fixed_in":["3.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"spamassassin","fixed_in":["3.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"spamassassin","fixed_in":["3.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"spamassassin","fixed_in":["3.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"spamassassin","fixed_in":["3.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"spamassassin","fixed_in":["3.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"spamassassin","fixed_in":["3.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"spamassassin","fixed_in":["3.4.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"spamassassin","fixed_in":["3.4.2-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"spamassassin","fixed_in":["3.4.2-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"spamassassin","fixed_in":["3.4.2-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"spamassassin","fixed_in":["3.4.2-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"spamassassin","fixed_in":["3.4.2-0ubuntu0.14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"spamassassin","fixed_in":["3.4.2-0ubuntu0.16.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"spamassassin","fixed_in":["3.4.2-0ubuntu0.18.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-0+deb8u1"}]}],"versions":["3.4.0-6","3.4.1-1","3.4.1-2","3.4.1-3","3.4.1-3~bpo8+1","3.4.1-4","3.4.1-5","3.4.1-5.1","3.4.1-6","3.4.1-6~bpo8+1","3.4.1-7","3.4.1-8"],"bundled":4},{"source":"osv","ecosystem":"Mageia:6","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-1.5.mga6"}]}],"bundled":4},{"source":"osv","ecosystem":"Mageia:6","package":"spamassassin-rules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-1.1.mga6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.0-4.el7_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"spamassassin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.0-4.el7_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.0-4.el7_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"spamassassin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.0-4.el7_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.0-4.el7_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"spamassassin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.0-4.el7_5"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-44.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-44.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-44.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-7.4.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-7.4.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-0ubuntu0.14.04.1"}]}],"versions":["3.3.2-6ubuntu2","3.3.2-8ubuntu1","3.3.2-8ubuntu2","3.4.0-1","3.4.0-1ubuntu1","3.4.0-1ubuntu2","3.4.0-1ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-0ubuntu0.16.04.1"}]}],"versions":["3.4.1-1","3.4.1-2","3.4.1-3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-0ubuntu0.18.04.1"}]}],"versions":["3.4.1-7","3.4.1-8","3.4.1-8build1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-0ubuntu0.14.04.1"}]}],"versions":["3.3.2-6ubuntu2","3.3.2-8ubuntu1","3.3.2-8ubuntu2","3.4.0-1","3.4.0-1ubuntu1","3.4.0-1ubuntu2","3.4.0-1ubuntu2.1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-0ubuntu0.16.04.1"}]}],"versions":["3.4.1-1","3.4.1-2","3.4.1-3"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-0ubuntu0.18.04.1"}]}],"versions":["3.4.1-7","3.4.1-8","3.4.1-8build1"],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-lp150.6.3.1"}]}],"bundled":4}],"products":[{"vendor":"apache","product":"spamassassin"},{"vendor":"apache software foundation","product":"apache spamassassin"},{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_server_eus"},{"vendor":"redhat","product":"enterprise_linux_workstation"}],"references":[{"url":"https://usn.ubuntu.com/3811-3/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/3811-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/201812-07","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.apache.org/thread.html/7f6a16bc0fd0fd5e67c7fd95bd655069a2ac7d1f88e42d3c853e601c%40%3Cannounce.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2916","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00016.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00002.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-11781","tags":["advisory"]},{"url":"https://lists.apache.org/thread.html/7f6a16bc0fd0fd5e67c7fd95bd655069a2ac7d1f88e42d3c853e601c@%3Cannounce.apache.org%3E"},{"url":"https://github.com/advisories/GHSA-qvvf-537j-pvg4"},{"url":"https://security.alpinelinux.org/vuln/CVE-2018-11781","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-11781","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2018-0425.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=23590","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2018/09/16/1","tags":["web","report"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1629521","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1629536","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2916.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-15705","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-15705","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-15705","tags":["advisory"]},{"url":"https://mail-archives.apache.org/mod_mbox/spamassassin-announce/201809.mbox/raw/%3Cc57c0f41-742c-3c3e-249c-ae2614bf0d7d%40apache.org%3E/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-11781","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-11781","tags":["advisory","report"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191961-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1108745","tags":["report"]},{"url":"https://bugzilla.suse.com/1108748","tags":["report"]},{"url":"https://bugzilla.suse.com/1108750","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11781","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192011-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1069831","tags":["report"]},{"url":"https://bugzilla.suse.com/1107765","tags":["report"]},{"url":"https://bugzilla.suse.com/1108749","tags":["report"]},{"url":"https://bugzilla.suse.com/1115411","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-11781","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3811-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3811-3","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-15705","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-11780","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XWM23J3YFXDJ4Y2P4EH532AXFSDKVM3Q/#XWM23J3YFXDJ4Y2P4EH532AXFSDKVM3Q","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2018-11781","description":"Apache SpamAssassin 3.4.2 fixes a local user code injection in the meta rule syntax.","status":"published","published":"2018-09-17T14:00:00Z","modified":"2024-09-16T18:48:23.905Z","updated_at":"2026-11-02T14:35:09.908186Z"}],"euvd":[{"id":"EUVD-2018-3784","description":"Apache SpamAssassin 3.4.2 fixes a local user code injection in the meta rule syntax.","status":"published","published":"2018-09-17T14:00:00Z","modified":"2024-09-16T18:48:23Z","updated_at":"2026-11-03T00:55:29.13849Z"}],"ghsa":[{"id":"GHSA-qvvf-537j-pvg4","title":"Apache SpamAssassin 3.4.2 fixes a local user code injection in the meta rule syntax.","description":"Apache SpamAssassin 3.4.2 fixes a local user code injection in the meta rule syntax.","status":"published","published":"2022-05-14T00:54:20Z","modified":"2023-02-02T05:02:33Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:51:28.259401Z"}],"nvd":[{"id":"CVE-2018-11781","description":"Apache SpamAssassin 3.4.2 fixes a local user code injection in the meta rule syntax.","status":"published","published":"2018-09-17T14:29:00.577Z","modified":"2026-06-17T01:36:35.1Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:04:40.661264Z"}],"osv":[{"id":"ALPINE-CVE-2018-11781","description":"Apache SpamAssassin 3.4.2 fixes a local user code injection in the meta rule syntax.","status":"published","published":"2018-09-17T14:29:00.577Z","modified":"2026-10-23T17:17:55.205885935Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:47.187336Z"},{"id":"CVE-2018-11781","description":"Apache SpamAssassin 3.4.2 fixes a local user code injection in the meta rule syntax.","status":"published","published":"2018-09-17T14:29:00.577Z","modified":"2026-10-24T10:30:20.278380789Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:07.934182Z"},{"id":"DEBIAN-CVE-2018-11781","description":"Apache SpamAssassin 3.4.2 fixes a local user code injection in the meta rule syntax.","status":"published","published":"2018-09-17T14:29:00.577Z","modified":"2026-10-23T18:03:53.826204681Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:29.988046Z"},{"id":"RHSA-2018:2916","title":"Red Hat Security Advisory: spamassassin security update","status":"published","published":"2024-09-16T01:47:40Z","modified":"2026-06-26T10:38:59Z","cvss":[{"version":"3.0","score":8.4,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"UBUNTU-CVE-2018-11781","description":"Apache SpamAssassin 3.4.2 fixes a local user code injection in the meta rule syntax.","status":"published","published":"2018-09-17T00:00:00Z","modified":"2026-02-04T03:46:56.407241Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:16.544091Z"},{"id":"DLA-1578-1","title":"spamassassin - security update","status":"published","published":"2018-11-13T00:00:00Z","modified":"2026-03-09T01:21:50.343955Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"MGASA-2018-0425","title":"Updated spamassassin packages fix security vulnerabilities","description":"Updated spamassassin package fixes security vulnerabilities:\n\nA reliance on \".\" in @INC in one configuration script (CVE-2016-1238).\n\nA denial of service vulnerability arises with certain unclosed tags in\nemails that cause markup to be handled incorrectly leading to scan\ntimeouts (CVE-2017-15705).\n\nA potential Remote Code Execution bug with the PDFInfo plugin\n(CVE-2018-11780).\n\nA local user code injection in the meta rule syntax (CVE-2018-11781).\n","status":"published","published":"2018-10-30T18:01:43Z","modified":"2026-04-16T06:22:29.978632277Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"openSUSE-SU-2019:1831-1","title":"Security update for spamassassin","description":"This update for spamassassin to version 3.4.2 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-11781: Fixed an issue where a local user could inject code in the meta rule syntax (bsc#1108748).\n- CVE-2018-11780: Fixed a potential remote code execution vulnerability in the PDFInfo plugin (bsc#1108750).\n- CVE-2017-15705: Fixed a denial of service through unclosed tags in crafted emails (bsc#1108745).\n- CVE-2016-1238: Fixed an issue where perl would load modules from the current directory (bsc#1108749).\n\nNon-security issues fixed:\n\n- Use systemd timers instead of cron (bsc#1115411)\n- Fixed incompatibility with Net::DNS \u003e= 1.01 (bsc#1107765)\n- Fixed warning about deprecated regex during sa-update (bsc#1069831)\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-08-06T15:40:29Z","modified":"2026-02-04T04:27:25.52352Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"SUSE-SU-2019:1961-1","title":"Security update for spamassassin","description":"This update for spamassassin to version 3.4.2 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2017-15705: Fixed denial of service via unclosed tags in crafted emails (bsc#1108745).\n- CVE-2018-11781: Fixed a code injection in the meta rule syntax by local users (bsc#1108748).\n- CVE-2018-11780: Fixed a potential remote code execution vulnerability in PDFInfo plugin (bsc#1108750).\n\nNon-security issues fixed:\n\n- Added four new plugins (disabled by default): HashBL, ResourceLimits, FromNameSpoof, Phishing\n- sa-update script: optional support for SHA-256 / SHA-512 been added for better validation of rules\n- GeoIP2 support has been added to RelayCountry and URILocalBL plugins\n- Several new or enhanced configuration options\n","status":"published","published":"2019-07-24T08:32:56Z","modified":"2026-02-04T03:42:55.070409Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2019:2011-1","title":"Security update for spamassassin","description":"This update for spamassassin to version 3.4.2 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-11781: Fixed an issue where a local user could inject code in the meta rule syntax (bsc#1108748).\n- CVE-2018-11780: Fixed a potential remote code execution vulnerability in the PDFInfo plugin (bsc#1108750).\n- CVE-2017-15705: Fixed a denial of service through unclosed tags in crafted emails (bsc#1108745).\n- CVE-2016-1238: Fixed an issue where perl would load modules from the current directory (bsc#1108749).\n\nNon-security issues fixed:\n\n- Use systemd timers instead of cron (bsc#1115411)\n- Fixed incompatibility with Net::DNS \u003e= 1.01 (bsc#1107765)\n- Fixed warning about deprecated regex during sa-update (bsc#1069831)\n","status":"published","published":"2019-07-29T12:46:29Z","modified":"2026-02-04T04:01:02.871865Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"USN-3811-1","title":"spamassassin vulnerabilities","description":"It was discovered that SpamAssassin incorrectly handled certain unclosed\ntags in emails. A remote attacker could possibly use this issue to cause a\ndenial of service. (CVE-2017-15705)\n\nIt was discovered that SpamAssassin incorrectly handled the PDFInfo plugin.\nA remote attacker could possibly use this issue to execute arbitrary code.\n(CVE-2018-11780)\n\nIt was discovered that SpamAssassin incorrectly handled meta rule syntax. A\nlocal attacker could possibly use this issue to execute arbitrary code.\n(CVE-2018-11781)\n","status":"published","published":"2018-11-06T16:17:44Z","modified":"2026-02-10T04:41:26Z","updated_at":"2026-11-02T16:58:14.019824Z"}]}}