Test ID:	1.3.6.1.4.1.25623.1.0.882963
Category:	CentOS Local Security Checks
Title:	CentOS Update for spamassassin CESA-2018:2916 centos7
Summary:	Check the version of spamassassin
Description:	Summary: Check the version of spamassassin Vulnerability Insight: The SpamAssassin tool provides a way to reduce unsolicited commercial email (spam) from incoming email. Security Fix(es): * spamassassin: Certain unclosed tags in crafted emails allow for scan timeouts and result in denial of service (CVE-2017-15705) * spamassassin: Local user code injection in the meta rule syntax (CVE-2018-11781) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section. Affected Software/OS: spamassassin on CentOS 7 Solution: Please install the updated packages. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-15705 BugTraq ID: 105347 http://www.securityfocus.com/bid/105347 https://security.gentoo.org/glsa/201812-07 https://lists.apache.org/thread.html/7f6a16bc0fd0fd5e67c7fd95bd655069a2ac7d1f88e42d3c853e601c@%3Cannounce.apache.org%3E https://lists.debian.org/debian-lts-announce/2018/11/msg00016.html RedHat Security Advisories: RHSA-2018:2916 https://access.redhat.com/errata/RHSA-2018:2916 SuSE Security Announcement: openSUSE-SU-2019:1831 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00002.html https://usn.ubuntu.com/3811-1/ https://usn.ubuntu.com/3811-2/ Common Vulnerability Exposure (CVE) ID: CVE-2018-11781 https://usn.ubuntu.com/3811-3/
Copyright	Copyright (C) 2018 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.