Lucene search
Gentoo FoundationMGASA-2015-0484HistoryDec 24, 2015 - 2:08 p.m.
Updated php-phpmailer packages fix CVE-2015-8476
2015-12-2414:08:20
Gentoo Foundation
advisories.mageia.org
8
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
65.2%
Updated php-phpmailer package fixes security vulnerability: Takeshi Terada discovered that PHPMailer accepted addresses containing line breaks. This is valid in RFC5322, but allowing such addresses resulted in invalid RFC5321 SMTP commands, permitting a kind of message injection attack (CVE-2015-8476).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 5 | noarch | php-phpmailer | < 5.2.14-1 | php-phpmailer-5.2.14-1.mga5 |
Related
nessus
nessus
Fedora 22 : php-PHPMailer-5.2.14-1.fc22 (2015-39522bb8c9)
2016-03-04 00:00:00
Fedora 23 : php-PHPMailer-5.2.14-1.fc23 (2015-abf9659276)
2016-03-04 00:00:00
Debian DLA-363-1 : libphp-phpmailer security update
2015-12-09 00:00:00
openvas
openvas
Debian Security Advisory DSA 3416-1 (libphp-phpmailer - security update)
2015-12-13 00:00:00
PHPMailer < 5.2.14 SMTP CRLF Injection Vulnerability
2018-09-25 00:00:00
Fedora Update for php-PHPMailer FEDORA-2015-39522
2016-02-12 00:00:00
debian
debian
[SECURITY] [DSA 3416-1] libphp-phpmailer security update
2015-12-13 19:11:48
[SECURITY] [DLA 363-1] libphp-phpmailer security update
2015-12-08 18:35:05
[SECURITY] [DSA 3416-1] libphp-phpmailer security update
2015-12-13 19:11:48
veracode
veracode
Multiple CRLF Injection
2017-07-26 08:32:53
github
github
SMTP Injection in PHPMailer
2020-03-05 22:09:19
osv
osv
libphp-phpmailer - security update
2015-12-08 00:00:00
SMTP Injection in PHPMailer
2020-03-05 22:09:19
friendsofphp
friendsofphp
Multiple CRLF injection vulnerabilities
2015-11-01 10:15:00
fedora
fedora
[SECURITY] Fedora 22 Update: php-PHPMailer-5.2.14-1.fc22
2016-02-11 13:49:45
[SECURITY] Fedora 23 Update: php-PHPMailer-5.2.14-1.fc23
2016-02-11 13:24:07
ubuntucve
ubuntucve
CVE-2015-8476
2015-12-16 00:00:00
cve
cve
CVE-2015-8476
2015-12-16 21:59:00
prion
prion
Crlf injection
2015-12-16 21:59:00
debiancve
debiancve
CVE-2015-8476
2015-12-16 21:59:00
altlinux
altlinux
Security fix for the ALT Linux 9 package phpipam version 1.26.050-alt1
2016-12-26 00:00:00
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
65.2%
Related for MGASA-2015-0484