NetSight
IP …
high7.4

CVE-2024-28054

Amavis before 2.12.3 and 2.13.x before 2.13.1, in part because of its use of MIME-tools, has an Interpretation Conflict (relative to some mail user agents) whe…

Impact

Amavis before 2.12.3 and 2.13.x before 2.13.1, in part because of its use of MIME-tools, has an Interpretation Conflict (relative to some mail user agents) when there are multiple boundary parameters in a MIME email message. Consequently, there can be an incorrect check for banned files or malware.

Affected products

VendorProductAffected versions
AmavisAmavis
before 2.12.3
2.13.X
before 2.13.1

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

CWE-436

References