CVE-2026-116272

A flaw was found in perl-mime-tools. A remote attacker can bypass email security filters by sending a specially crafted message containing duplicate Multipurpose Internet Mail Extensions MIME boundary parameters with nested comments. Because the parser fails to properly normalize parameter names...

CVE-2026-116271

A flaw was found in perl-mime-tools. This vulnerability allows a local attacker to overwrite arbitrary files with the permissions of the application process. When the parser writes message attachments into a shared or world-writable directory, an attacker can pre-create the expected output...

CVE-2026-116269

A flaw was found in MIME-tools. When parsing email attachment filenames that contain hyphenated language tags, the decoder fails to properly process the character set and incorrectly returns an empty filename. A remote attacker can exploit this flaw by sending a specially crafted email message to...

CVE-2026-116268

A flaw was found in perl-MIME-tools. A remote attacker can cause a Denial of Service DoS by supplying specially crafted Multipurpose Internet Mail Extensions MIME headers containing unclosed comments. Due to inefficient parsing of parameters lacking closing parentheses, the parser repeatedly scan...

CVE-2026-116266

A flaw was found in perl-mime-tools. When parsing email headers, the library decodes partially encoded boundary values in multipart messages without flagging the content as ambiguous. A remote attacker can exploit this flaw by sending a specially crafted email message to bypass email security...

CVE-2026-116265

A flaw was found in perl-MIME-tools. A remote attacker can exploit this vulnerability to bypass email security filters by sending an email with specially crafted multipart boundary parameters. Because the parser does not properly validate boundary parameters split across continuations, it process...

CVE-2026-116264

A flaw was found in perl-MIME-tools. This vulnerability allows a remote attacker to bypass email security filters by sending an email with a malformed Content-Type parameter. Because the parser halts processing upon encountering an invalid parameter name, it discards subsequent parameters,...

CVE-2026-116273

A flaw was found in perl-mime-tools. The parser does not enforce a default limit on the number of parts processed in a MIME Multipurpose Internet Mail Extensions message. A remote attacker could exploit this vulnerability by submitting a crafted message containing an excessive number of parts,...

CVE-2026-116270

A flaw was found in perl-MIME-tools. The message header decoding routine improperly accumulates error messages when processing repeated malformed encoded word sequences. A remote attacker can exploit this vulnerability by submitting a specially crafted message header, causing excessive memory...

FreeBSD : p5-MIME-Tools -- multiple vulnerabilities (2b2d5d3e-d2c8-11f1-97dc-40b034429ecf)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 2b2d5d3e-d2c8-11f1-97dc-40b034429ecf advisory. MIME-tools project reports: Many security issues were addressed see the following ten CVEs...

p5-MIME-Tools -- multiple vulnerabilities

MIME-tools project reports: Many security issues were addressed see the following ten CVEs Issues were brought to my attention, and patches supplied, by the CPANSec security group. CVE-2026-116264 invalid parameter hides boundary/filename CVE-2026-116265 RFC 2231 boundary skips ambiguity checks...

CVE-2024-28054

Amavis before 2.12.3 and 2.13.x before 2.13.1, in part because of its use of MIME-tools, has an Interpretation Conflict relative to some mail user agents when there are multiple boundary parameters in a MIME email message. Consequently, there can be an incorrect check for banned files or malware...

Amavis Improper Access Control Privilege Escalation

The vulnerability of the MIME-tools content-filtering email filtering component, such as Amavis, is related to interpretation conflicts. This occurs when an email message contains multiple boundary parameters. Exploiting this vulnerability can allow a malicious actor to enhance their privileges...

ROS-20240611-03

A vulnerability in the MIME-tools component of the open-source content filter for Amavis email is related to an interpretation conflict when a MIME email message has multiple boundary parameters. Exploitation of the vulnerability could allow an attacker acting remotely to elevate the privileges...

Mageia: Security Advisory (MGASA-2024-0212)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated amavisd-new packages fix security vulnerability

Amavis before 2.12.3 and 2.13.x before 2.13.1, in part because of its use of MIME-tools, has an Interpretation Conflict relative to some mail user agents when there are multiple boundary parameters in a MIME email message. Consequently, there can be an incorrect check for banned files or malware...

Fedora 40 : amavis (2024-8bbcae6af2)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-8bbcae6af2 advisory. Update to version 2.13.1 Fix CVE-2024-28054 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...

Fedora 39 : amavis (2024-3cf9eb64ba)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-3cf9eb64ba advisory. Update to version 2.13.1 Fix CVE-2024-28054 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...

DEBIAN-CVE-2024-28054

Amavis before 2.12.3 and 2.13.x before 2.13.1, in part because of its use of MIME-tools, has an Interpretation Conflict relative to some mail user agents when there are multiple boundary parameters in a MIME email message. Consequently, there can be an incorrect check for banned files or malware...

CVE-2024-28054

Amavis before 2.12.3 and 2.13.x before 2.13.1, in part because of its use of MIME-tools, has an Interpretation Conflict relative to some mail user agents when there are multiple boundary parameters in a MIME email message. Consequently, there can be an incorrect check for banned files or malware...