Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 603
Alerts This Week
Warning Icon 1 603

Ubuntu 12.04 ESM: USN-3811-2 Moderate: SpamAssassin DoS Risk

ubuntu
Calendar Grey November 13, 2018
Dist Ubuntu Esm H88
An exploit vulnerability impacts Ubuntu 12.04 ESM regarding SpamAssassin, which could lead to a crash triggered by specially designed file input.
SpamAssassin could be made to crash if it received a specially crafted file.

Summary

SpamAssassin could be made to crash if it received

a specially crafted file.

Software Description:

- spamassassin: Perl-based spam filter using text analysis

Details:

USN-3811-1 fixed a vulnerability in SpamAssassin. This update provides

the corresponding update for Ubuntu 12.04 ESM.

Original advisory details:

 It was discovered that SpamAssassin incorrectly handled certain

 unclosed tags in emails. A remote attacker could possibly use this

 issue to cause a denial of service. (CVE-2017-15705)

Topics%20covered

Topics Covered

security advisory denial of service update instructions ubuntu spamassassin

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 ESM:
  spamassassin                    3.3.2-2ubuntu1.2

In general, a standard system update will make all the necessary
changes.

References

  https://ubuntu.com/security/notices/USN-3811-2

  https://ubuntu.com/security/notices/USN-3811-1

  CVE-2017-15705

Severity
important
Lowest
Low
Medium
High
Critical

November 13, 2018

Topics%20covered

Topics Covered

security advisory denial of service update instructions ubuntu spamassassin

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.