Apache Spamassassin vulnerabilities
2 vulnerabilities
Known vulnerabilities in Apache Spamassassin, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
PrioritiseCVE-2019-12420apache · apache spamassassin +7 moreapache apache spamassassinIn Apache SpamAssassin before 3.4.3, a message can be crafted in a way to use excessive resources. Upgrading to SA 3.4.3 as soon as possible is the recommended fix but details will not be shared publicly.CVSS7.5HighEPSS7.23%RoutineCVE-2018-11805apache · apache spamassassin +5 moreapache apache spamassassinIn Apache SpamAssassin before 3.4.3, nefarious CF files can be configured to run system commands without any output or errors. With this, exploits can be injected in a number of scenarios. In addition to upgrading to SA 3.4.3, we recommend that users should only use update channels or 3rd party .cf files from trusted places.CVSS7.2HighEPSS0.91%