5
CVSSv2

CVE-2019-12420

Published: 12/12/2019 Updated: 07/11/2023
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

In Apache SpamAssassin prior to 3.4.3, a message can be crafted in a way to use excessive resources. Upgrading to SA 3.4.3 as soon as possible is the recommended fix but details will not be shared publicly.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

apache spamassassin

debian debian linux 8.0

debian debian linux 9.0

debian debian linux 10.0

Vendor Advisories

Debian Bug report logs - #946653 spamassassin: CVE-2019-12420: specially crafted messages can exhaust system resources resulting in a denial of service Package: spamassassin; Maintainer for spamassassin is Noah Meyerhans <noahm@debianorg>; Source for spamassassin is src:spamassassin (PTS, buildd, popcon) Reported by: Noah M ...
Synopsis Moderate: spamassassin security update Type/Severity Security Advisory: Moderate Topic An update for spamassassin is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVSS) base ...
Übersicht Moderate: spamassassin security update Typ/Schweregrad Security Advisory: Moderate Thema An update for spamassassin is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVSS) ...
Several security issues were fixed in SpamAssassin ...
Several security issues were fixed in SpamAssassin ...
Two vulnerabilities were discovered in spamassassin, a Perl-based spam filter using text analysis CVE-2018-11805 Malicious rule or configuration files, possibly downloaded from an updates server, could execute arbitrary commands under multiple scenarios CVE-2019-12420 Specially crafted mulitpart messages can cause spamassassin to ...
In Apache SpamAssassin before 343, a message can be crafted in a way to use excessive resources Upgrading to SA 343 as soon as possible is the recommended fix but details will not be shared publicly (CVE-2019-12420) ...
In Apache SpamAssassin before 343, a message can be crafted in a way to use excessive resources Upgrading to SA 343 as soon as possible is the recommended fix but details will not be shared publicly (CVE-2019-12420) In Apache SpamAssassin before 343, nefarious CF files can be configured to run system commands without any output or errors W ...
An excessive resource-consumption vulnerability where a message can be crafted in a way to use excessive resources ...

Mailing Lists

<!--X-Body-Begin--> <!--X-User-Header--> oss-sec mailing list archives <!--X-User-Header-End--> <!--X-TopPNI--> By Date By Thread </form> <!--X-TopPNI-End--> <!--X-MsgBody--> <!--X-Subject-Header-Begin--> Apache SpamAssassin v343 released with fix for CVE-2019-12420 <!--X-Subject-Header-End--> <!--X-Head-of-Message--> From: " ...