Lucene search

CVE-2019-12420

🗓️ 12 Dec 2019 23:12:15Reported by apacheType

Apache SpamAssassin before 3.4.3, crafting a message can use excessive resources.

Reporter	Title	Published	Views	Family All 67
Tenable Nessus	Amazon Linux 2 : spamassassin (ALAS-2020-1545)	27 Oct 202000:00	–	nessus
Tenable Nessus	NewStart CGSL CORE 5.05 / MAIN 5.05 : spamassassin Vulnerability (NS-SA-2021-0159)	27 Oct 202100:00	–	nessus
Tenable Nessus	Scientific Linux Security Update : spamassassin on SL7.x x86_64 (20201001)	21 Oct 202000:00	–	nessus
Tenable Nessus	RHEL 7 : spamassassin (RHSA-2020:3973)	19 Nov 202000:00	–	nessus
Tenable Nessus	CentOS 7 : spamassassin (RHSA-2020:3973)	20 Oct 202000:00	–	nessus
Tenable Nessus	NewStart CGSL CORE 5.04 / MAIN 5.04 : spamassassin Vulnerability (NS-SA-2021-0037)	10 Mar 202100:00	–	nessus
Tenable Nessus	Oracle Linux 7 : spamassassin (ELSA-2020-3973)	7 Oct 202000:00	–	nessus
Tenable Nessus	Debian DSA-4584-1 : spamassassin - security update	16 Dec 201900:00	–	nessus
Tenable Nessus	FreeBSD : spamassassin -- multiple vulnerabilities (70111759-1dae-11ea-966a-206a8a720317)	16 Dec 201900:00	–	nessus
Tenable Nessus	SUSE SLES15 Security Update : spamassassin (SUSE-SU-2021:1153-1)	14 Apr 202100:00	–	nessus

Nvd

Vulners

Node

apache spamassassinRange<3.4.3

Node

debian debian_linuxMatch8.0

debian debian_linuxMatch9.0

debian debian_linuxMatch10.0

[
  {
    "product": "Apache SpamAssassin",
    "vendor": "Apache",
    "versions": [
      {
        "status": "affected",
        "version": "Apache SpamAssassin prior to 3.4.3"
      }
    ]
  }
]

Source	Link
usn	www.usn.ubuntu.com/4237-1/
openwall	www.openwall.com/lists/oss-security/2019/12/12/2
lists	www.lists.apache.org/thread.html/5863d6c42fc9595a29566732f12348cde0ca0e41bda91695c62041de%40%3Cannounce.apache.org%3E
lists	www.lists.apache.org/thread.html/64cf76749956dd08f7d5b86ec9f3321f382cfd7fe717ccd1be940c92%40%3Cannounce.spamassassin.apache.org%3E
lists	www.lists.apache.org/thread.html/r2578c486552637bfedbe624940cc60d6463bd90044c887bdebb75e74%40%3Cusers.spamassassin.apache.org%3E
lists	www.lists.debian.org/debian-lts-announce/2019/12/msg00019.html
lists	www.lists.apache.org/thread.html/r3d32ebf97b1245b8237763444e911c4595d2ad5e34a1641840d8146f%40%3Cusers.spamassassin.apache.org%3E
debian	www.debian.org/security/2019/dsa-4584
usn	www.usn.ubuntu.com/4237-2/
seclists	www.seclists.org/bugtraq/2019/Dec/27

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

12 Dec 2019 23:15Current

7.2High risk

Vulners AI Score7.2

CVSS25.0

CVSS37.5

EPSS0.009

CWE-400