The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2018-2916 advisory.

    - Fix CVE-2018-11781 - Local user code injection in the meta rule syntax
    - Fix CVE-2017-15705 - Certain unclosed tags in crafted emails allow for

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update for spamassassin is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The SpamAssassin tool provides a way to reduce unsolicited commercial email (spam) from incoming email.

Security Fix(es) :

* spamassassin: Certain unclosed tags in crafted emails allow for scan timeouts and result in denial of service (CVE-2017-15705)

* spamassassin: Local user code injection in the meta rule syntax (CVE-2018-11781)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3811-1 advisory.

    It was discovered that SpamAssassin incorrectly handled certain unclosed tags in emails. A remote attacker     could possibly use this issue to cause a denial of service. (CVE-2017-15705)

    It was discovered that SpamAssassin incorrectly handled the PDFInfo plugin. A remote attacker could     possibly use this issue to execute arbitrary code. (CVE-2018-11780)

    It was discovered that SpamAssassin incorrectly handled meta rule syntax. A local attacker could possibly     use this issue to execute arbitrary code. (CVE-2018-11781)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for spamassassin to version 3.4.2 fixes the following issues :

Security issues fixed :

  - CVE-2018-11781: Fixed an issue where a local user could     inject code in the meta rule syntax (bsc#1108748).

  - CVE-2018-11780: Fixed a potential remote code execution     vulnerability in the PDFInfo plugin (bsc#1108750).

  - CVE-2017-15705: Fixed a denial of service through     unclosed tags in crafted emails (bsc#1108745).

  - CVE-2016-1238: Fixed an issue where perl would load     modules from the current directory (bsc#1108749).

Non-security issues fixed :

  - Use systemd timers instead of cron (bsc#1115411)

  - Fixed incompatibility with Net::DNS >= 1.01     (bsc#1107765)

  - Fixed warning about deprecated regex during sa-update     (bsc#1069831)

This update was imported from the SUSE:SLE-15:Update update project.

Fixed some small bugs in the previous package: Initial rules now have the correct version, sought channel config is dropped (since it doesn't exist anymore) and build / runtime deps adjusted. 

----

Update to 3.4.2. Fixes CVE-2017-15705, CVE-2018-11780 and CVE-2018-11781 along with many other bugfixes and improvements. See https://www.mail-archive.com/announce@apache.org/msg04823.html for more information.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security Fix(es) :

  - spamassassin: Certain unclosed tags in crafted emails     allow for scan timeouts and result in denial of service     (CVE-2017-15705)

  - spamassassin: Local user code injection in the meta rule     syntax (CVE-2018-11781)

According to the versions of the spamassassin package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A denial of service vulnerability was identified that     exists in Apache SpamAssassin before 3.4.2. The     vulnerability arises with certain unclosed tags in     emails that cause markup to be handled incorrectly     leading to scan timeouts. In Apache SpamAssassin, using     HTML::Parser, we setup an object and hook into the     begin and end tag event handlers In both cases, the     'open' event is immediately followed by a 'close' event
    - even if the tag *does not* close in the HTML being     parsed. Because of this, we are missing the 'text'     event to deal with the object normally. This can cause     carefully crafted emails that might take more scan time     than expected leading to a Denial of Service. The issue     is possibly a bug or design decision in HTML::Parser     that specifically impacts the way Apache SpamAssassin     uses the module with poorly formed html. The exploit     has been seen in the wild but not believed to have been     purposefully part of a Denial of Service attempt. We     are concerned that there may be attempts to abuse the     vulnerability in the future.(CVE-2017-15705)

  - Apache SpamAssassin 3.4.2 fixes a local user code     injection in the meta rule syntax.(CVE-2018-11781)

  - In Apache SpamAssassin before 3.4.3, a message can be     crafted in a way to use excessive resources. Upgrading     to SA 3.4.3 as soon as possible is the recommended fix     but details will not be shared     publicly.(CVE-2019-12420)

  - A command execution issue was found in Apache     SpamAssassin prior to 3.4.3. Carefully crafted     nefarious Configuration (.cf) files can be configured     to run system commands similar to CVE-2018-11805. This     issue is less stealthy and attempts to exploit the     issue will throw warnings. Thanks to Damian Lukowski at     credativ for reporting the issue ethically. With this     bug unpatched, exploits can be injected in a number of     scenarios though doing so remotely is difficult. In     addition to upgrading to SA 3.4.4, we again recommend     that users should only use update channels or 3rd party     .cf files from trusted places.(CVE-2020-1931)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the spamassassin package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - Apache SpamAssassin 3.4.2 fixes a local user code     injection in the meta rule syntax.(CVE-2018-11781)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Apache SpamAssassin 3.4.2 fixes a local user code injection in the meta rule syntax. (CVE-2018-11781)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2018-3356:01 advisory.

    * spamassassin: Certain unclosed tags in crafted emails allow for scan timeouts and result in denial of     service (CVE-2017-15705)
    * spamassassin: Local user code injection in the meta rule syntax (CVE-2018-11781)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Multiple vulnerabilities were found in Spamassassin, which could lead to Remote Code Execution and Denial of Service attacks under certain circumstances.

CVE-2016-1238

Many Perl programs do not properly remove . (period) characters from the end of the includes directory array, which might allow local users to gain privileges via a Trojan horse module under the current working directory.

CVE-2017-15705

A denial of service vulnerability was identified that exists in Apache SpamAssassin before 3.4.2. The vulnerability arises with certain unclosed tags in emails that cause markup to be handled incorrectly leading to scan timeouts. This can cause carefully crafted emails that might take more scan time than expected leading to a Denial of Service.

CVE-2018-11780

A potential Remote Code Execution bug exists with the PDFInfo plugin in Apache SpamAssassin before 3.4.2.

CVE-2018-11781

Apache SpamAssassin 3.4.2 fixes a local user code injection in the meta rule syntax.

For Debian 8 'Jessie', these problems have been fixed in version 3.4.2-0+deb8u1. Upstream strongly advocates upgrading to the latest upstream version so we are following that recommendation and backported the version published as part of the 9.6 stretch release, which also fixes many critical bugs.

We recommend that you upgrade your spamassassin packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201812-07 (SpamAssassin: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in SpamAssassin. Please       review the referenced CVE identifiers for details.
  Impact :

    A remote attacker could execute arbitrary code, escalate privileges, or       cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
118076	Oracle Linux 7 : spamassassin (ELSA-2018-2916)	Nessus	Oracle Linux Local Security Checks	2018/10/12	2024/10/22	high
118117	CentOS 7 : spamassassin (CESA-2018:2916)	Nessus	CentOS Local Security Checks	2018/10/16	2022/2/8	high
118797	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : SpamAssassin vulnerabilities (USN-3811-1)	Nessus	Ubuntu Local Security Checks	2018/11/7	2024/8/27	critical
127739	openSUSE Security Update : spamassassin (openSUSE-2019-1831)	Nessus	SuSE Local Security Checks	2019/8/12	2024/5/6	critical
117840	Fedora 27 : spamassassin (2018-6ed251c42b)	Nessus	Fedora Local Security Checks	2018/10/1	2024/8/1	critical
118108	Scientific Linux Security Update : spamassassin on SL7.x x86_64 (20181011)	Nessus	Scientific Linux Local Security Checks	2018/10/15	2022/2/8	high
120387	Fedora 28 : spamassassin (2018-46d7a7f63e)	Nessus	Fedora Local Security Checks	2019/1/3	2024/7/8	critical
142129	EulerOS 2.0 SP5 : spamassassin (EulerOS-SA-2020-2272)	Nessus	Huawei Local Security Checks	2020/10/30	2024/2/13	high
142345	EulerOS 2.0 SP2 : spamassassin (EulerOS-SA-2020-2397)	Nessus	Huawei Local Security Checks	2020/11/3	2024/2/12	high
222201	Linux Distros Unpatched Vulnerability : CVE-2018-11781	Nessus	Misc.	2025/3/4	2026/1/28	high
289994	MiracleLinux 7 : spamassassin-3.4.0-4.el7 (AXSA:2018-3356:01)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/16	high
118938	Debian DLA-1578-1 : spamassassin security update	Nessus	Debian Local Security Checks	2018/11/14	2024/7/22	critical
119703	GLSA-201812-07 : SpamAssassin: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2018/12/17	2024/7/15	critical
140885	EulerOS 2.0 SP3 : spamassassin (EulerOS-SA-2020-2118)	Nessus	Huawei Local Security Checks	2020/9/28	2024/2/19	high

检测

插件搜索

high

high

critical

critical

critical

high

critical

high

high

high

high

critical

critical

high