CVE-2019-12420
12.12.2019, 23:15
In Apache SpamAssassin before 3.4.3, a message can be crafted in a way to use excessive resources. Upgrading to SA 3.4.3 as soon as possible is the recommended fix but details will not be shared publicly.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| apache | spamassassin | 𝑥 < 3.4.3 |
| debian | debian_linux | 8.0 |
| debian | debian_linux | 9.0 |
| debian | debian_linux | 10.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| perl-Mail-SpamAssassin |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||
| perl-Mail-SpamAssassin-Plugin-iXhash2 |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||
| spamassassin |
|
References