CVE-2018-11780

Publication date 17 September 2018

Last updated 25 August 2025

Ubuntu priority

Medium

Why this priority?

Cvss 3 Severity Score

9.8 · Critical

Score breakdown

Description

A potential Remote Code Execution bug exists with the PDFInfo plugin in Apache SpamAssassin before 3.4.2.

Status

Package Ubuntu Release Status
spamassassin 18.10 cosmic
Not affected
18.04 LTS bionic
Fixed in 3.4.2-0ubuntu0.18.04.1
16.04 LTS xenial
Fixed in 3.4.2-0ubuntu0.16.04.1
14.04 LTS trusty
Fixed in 3.4.2-0ubuntu0.14.04.1

Severity score breakdown

CVSS version: CVSS v3.0

Base score 9.8 · Critical

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

Related Ubuntu Security Notices (USN)

    • USN-3811-3
    • SpamAssassin vulnerabilities
    • 5 December 2018
    • USN-3811-1
    • SpamAssassin vulnerabilities
    • 6 November 2018

Other references

Access our resources on patching vulnerabilities