PT-2022-11353

Name of the Vulnerable Software and Affected Versions Aruba Instant On 1930 Switch Series versions prior to 1.0.7.0 Description A remote issue was discovered, potentially affecting devices worldwide. The issue allows for remote exploitation. Recommendations For versions prior to 1.0.7.0, update t...

Aruba Instant 输入验证错误漏洞

Aruba Instant is a wireless network from Aruba USA. provides the only Wi-Fi solution that is easy to set up. An input validation error vulnerability exists in Aruba Instant On 1930 switches due to insufficient validation of user-supplied input. A remote attacker could pass specially crafted input...

HPESBNW04270 rev.2 - HPE Aruba Instant On 1930 switch, Denial of Service

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba Instant On 1930 Switch Series - Firmware below v1.0.7.0 - see note in summary Affected Products Aruba Instant On 1930 switches firmware versions 1.0.7.0 and below when...

CVE-2021-1930

creationtimestamp| type| source ---|---|--- 2021-09-08 16:28:23+00:00| seen| https://t.me/cibsecurity/28419...

CVE-2021-1930

Possible out of bounds read due to incorrect validation of incoming buffer length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-1930

CVE-2021-1930 describes a buffer-length validation bug in Qualcomm Snapdragon components (Snapdragon Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, and Mobile) that can cause an out-of-bounds read. The root cause is incorrect validation of the incoming buffer length, leading to potent...

SUSE: Security Advisory (SUSE-SU-2020:0811-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2020:0810-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2020:0813-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 8 : spamassassin (CESA-2020:4625)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:4625 advisory. - spamassassin: crafted configuration files can run system commands without any output or errors CVE-2018-11805 - spamassassin: crafted email message c...

Oracle Linux 8 : spamassassin (ELSA-2020-4625)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-4625 advisory. - Fixed CVE-2018-11805 - Fixed CVE-2020-1930 - Fixed CVE-2020-1931 - Fix CVE-2019-12420 Tenable has extracted the preceding description block directly...

spamassassin security update

3.4.2-10 - Fixed CVE-2018-11805 - Resolves: rhbz1787514 - Fixed CVE-2020-1930 - Resolves: rhbz1820649 - Fixed CVE-2020-1931 - Resolves: rhbz1820650 3.4.2-9 - Fix CVE-2019-12420 - Resolves: rhbz1812977 3.4.2-8 - Removed the obsolete SOUGHT channel for rule updates - Resolves: rhbz1630362...

openSUSE Security Update : spamassassin (openSUSE-2020-446)

This update for spamassassin fixes the following issues : Security issues fixed : - CVE-2018-11805: Fixed an issue with delimiter handling in rule files related to isregexpvalid bsc1118987. - CVE-2020-1930: Fixed an issue with rule configuration .cf files which can be configured to run system...

openSUSE: Security Advisory for spamassassin (openSUSE-SU-2020:0446-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2020:0446-1 Security update for spamassassin

This update for spamassassin fixes the following issues: Security issues fixed: - CVE-2018-11805: Fixed an issue with delimiter handling in rule files related to isregexpvalid bsc1118987. - CVE-2020-1930: Fixed an issue with rule configuration .cf files which can be configured to run system...

SUSE SLES12 Security Update : spamassassin (SUSE-SU-2020:0810-1)

This update for spamassassin fixes the following issues : CVE-2018-11805: Fixed an issue with delimiter handling in rule files related to isregexpvalid bsc1118987. CVE-2020-1930: Fixed an issue with rule configuration .cf files which can be configured to run system commands bsc1162197...

SUSE-SU-2020:0810-1 Security update for spamassassin

This update for spamassassin fixes the following issues: - CVE-2018-11805: Fixed an issue with delimiter handling in rule files related to isregexpvalid bsc1118987. - CVE-2020-1930: Fixed an issue with rule configuration .cf files which can be configured to run system commands bsc1162197. -...

CVE-2020-1930

A command execution issue was found in Apache SpamAssassin prior to 3.4.3. Carefully crafted nefarious rule configuration .cf files can be configured to run system commands similar to CVE-2018-11805. With this bug unpatched, exploits can be injected in a number of scenarios including the same...

Fedora 30 : spamassassin (2020-bd20036cdc)

Update to 3.4.4. Fixes CVE-2020-1930 and CVE-2020-1931. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 31 : spamassassin (2020-24dac7d890)

Update to 3.4.4. Fixes CVE-2020-1930 and CVE-2020-1931. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...