Code injection in SpamAssassin - CVE-2018-11781

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU16311

Code injection in SpamAssassin - CVE-2018-11781

Published: December 6, 2018


Vulnerability identifier: #VU16311
CSH Severity: Low
CVSS v4: 9.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H]
CVE-ID: CVE-2018-11781
CWE-ID: CWE-94
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local attacker to execute arbitrary code on the target system.

The vulnerability exists due to a code injection condition in the meta rule syntax that exists when rules are processed by the affected software. A local attacker can supply specially crafted data and execute arbitrary code with elevated privileges.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


Affected software

SpamAssassin
Amazon Linux AMI
Gentoo Linux
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux for Power
Opensuse
Fedora
spamassassin (Alpine package)
spamassassin

How to mitigate CVE-2018-11781

Update to version 3.4.2.

SpamAssassin - update to 3.4.2
spamassassin (Alpine package) - addressed in versions 3.4.2-r0, 3.4.3-r0
spamassassin - addressed in versions 3.4.2-1.fc27, 3.4.2-1.fc28, 3.4.2-1.fc29, 3.4.2-2.fc27, 3.4.2-2.fc28, 3.4.2-2.fc29

External References

Related Security Bulletins