CVE-2024-28054

High severity, CVSS 7.4. EPSS: 0.8% chance of exploitation in the next 30 days.

Amavis before 2.12.3 and 2.13.x before 2.13.1, in part because of its use of MIME-tools, has an Interpretation Conflict (relative to some mail user agents) when there are multiple boundary parameters in a MIME email message. Consequently, there can be an incorrect check for banned files or malware.

Published 2024-03-18. Last modified 2026-06-17.