Lucene search

K
ubuntuUbuntuUSN-6790-1
HistoryMay 28, 2024 - 12:00 a.m.

amavisd-new vulnerability

2024-05-2800:00:00
ubuntu.com
3
ubuntu
amavisd-new
vulnerability
mime
email
malware
bypass
boundary parameters

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

13.1%

Releases

  • Ubuntu 24.04 LTS
  • Ubuntu 23.10
  • Ubuntu 22.04 LTS
  • Ubuntu 20.04 LTS

Packages

  • amavisd-new - Interface between MTA and virus scanner/content filters

Details

It was discovered that amavisd-new incorrectly handled certain MIME email
messages with multiple boundary parameters. A remote attacker could
possibly use this issue to bypass checks for banned files or malware.

OSVersionArchitecturePackageVersionFilename
Ubuntu24.04noarchamavisd-new< 1:2.13.0-3ubuntu2UNKNOWN
Ubuntu24.04noarchamavisd-new-postfix< 1:2.13.0-3ubuntu2UNKNOWN
Ubuntu23.10noarchamavisd-new< 1:2.13.0-3ubuntu1.1UNKNOWN
Ubuntu23.10noarchamavisd-new-postfix< 1:2.13.0-3ubuntu1.1UNKNOWN
Ubuntu22.04noarchamavisd-new< 1:2.12.2-1ubuntu1.1UNKNOWN
Ubuntu22.04noarchamavisd-new-postfix< 1:2.12.2-1ubuntu1.1UNKNOWN
Ubuntu20.04noarchamavisd-new< 1:2.11.0-6.1ubuntu1.1UNKNOWN
Ubuntu20.04noarchamavisd-new-postfix< 1:2.11.0-6.1ubuntu1.1UNKNOWN

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

13.1%