Amavis before 2.12.3 and 2.13.x before 2.13.1, in part because of its use of MIME-tools, has an Interpretation Conflict (relative to some mail user agents) when there are multiple boundary parameters in a MIME email message. Consequently, there can be an incorrect check for banned files or malware.

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.10 / 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6790-1 advisory.

    It was discovered that amavisd-new incorrectly handled certain MIME email messages with multiple boundary     parameters. A remote attacker could possibly use this issue to bypass checks for banned files or malware.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-8bbcae6af2 advisory.

    Update to version 2.13.1     Fix CVE-2024-28054

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-1d87055861 advisory.

    Update to version 2.13.1     Fix CVE-2024-28054

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-3cf9eb64ba advisory.

    Update to version 2.13.1     Fix CVE-2024-28054

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 0a48e552-e470-11ee-99b3-589cfc0f81b0 advisory.

  - The Amavis project reports: Emails which consist of multiple parts (`Content-Type: multipart/*`)     incorporate boundary information stating at which point one part ends and the           next part begins.
    A boundary is announced by an Content-Type header's `boundary` parameter. To           our current     knowledge, RFC2046 and RFC2045 do not explicitly specify how a           parser should handle multiple     boundary parameters that contain conflicting           values. As a result, there is no canonical choice     which of the values should or           should not be used for mime part decomposition. (CVE-2024-28054)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
198048	Ubuntu 20.04 LTS / 22.04 LTS / 23.10 / 24.04 LTS : amavisd-new vulnerability (USN-6790-1)	Nessus	Ubuntu Local Security Checks	critical
194524	Fedora 40 : amavis (2024-8bbcae6af2)	Nessus	Fedora Local Security Checks	critical
192480	Fedora 38 : amavis (2024-1d87055861)	Nessus	Fedora Local Security Checks	critical
192479	Fedora 39 : amavis (2024-3cf9eb64ba)	Nessus	Fedora Local Security Checks	critical
192186	FreeBSD : amavisd-new -- multipart boundary confusion (0a48e552-e470-11ee-99b3-589cfc0f81b0)	Nessus	FreeBSD Local Security Checks	high

Detections

Analytics

CVE-2024-28054

critical

Tenable Plugins

critical

critical

critical

critical

high