In Apache SpamAssassin before 3.4.3, a message can be crafted in a way to use excessive resources. Upgrading to SA 3.4.3 as soon as possible is the recommended fix but details will not be shared publicly.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-spamassassin | May 4, 2022 | Dec 12, 2019 | |
| Alpine Linux | alpine-linux-upgrade-spamassassin | Jan 3, 2020 | Dec 12, 2019 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-spamassassinamazon-linux-ami-2-upgrade-spamassassin-debuginfo | Oct 28, 2020 | Dec 12, 2019 | |
| Amazon_linux | — | amazon-linux-upgrade-spamassassin | Feb 8, 2020 | Dec 12, 2019 |
| Centos_linux | — | centos-upgrade-spamassassincentos-upgrade-spamassassin-debuginfocentos-upgrade-spamassassin-debugsource | Oct 1, 2020 | Dec 12, 2019 |
| Debian | debian-upgrade-spamassassin | Dec 16, 2019 | Dec 12, 2019 | |
| Freebsd | freebsd-upgrade-package-spamassassin | Dec 14, 2019 | Dec 13, 2019 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-spamassassin | Feb 22, 2021 | Dec 12, 2019 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-spamassassin | Jan 20, 2021 | Dec 12, 2019 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-spamassassin | Nov 2, 2020 | Dec 12, 2019 | |
| Oracle_linux | — | oracle-linux-upgrade-spamassassin | Oct 7, 2020 | Dec 12, 2019 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-spamassassinredhat-upgrade-spamassassin-debuginforedhat-upgrade-spamassassin-debugsource | Oct 1, 2020 | Dec 12, 2019 | |
| Suse | — | suse-upgrade-perl-mail-spamassassinsuse-upgrade-perl-mail-spamassassin-plugin-ixhash2suse-upgrade-spamassassin | Apr 13, 2021 | Dec 12, 2019 |
| Ubuntu | ubuntu-pro-upgrade-spamassassinubuntu-upgrade-spamassassin | Jan 14, 2020 | Dec 12, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub