CVE Vulnerabilities

CVE-2024-28054

Published: Mar 18, 2024 | Modified: Mar 23, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

Amavis before 2.12.3 and 2.13.x before 2.13.1, in part because of its use of MIME-tools, has an Interpretation Conflict (relative to some mail user agents) when there are multiple boundary parameters in a MIME email message. Consequently, there can be an incorrect check for banned files or malware.

Affected Software

Name Vendor Start Version End Version
Amavisd-new Ubuntu devel *
Amavisd-new Ubuntu focal *
Amavisd-new Ubuntu jammy *
Amavisd-new Ubuntu mantic *
Amavisd-new Ubuntu noble *
Amavisd-new Ubuntu oracular *
Amavisd-new Ubuntu upstream *

References