In Apache SpamAssassin before 3.4.3, a message can be crafted in a way to use excessive resources. Upgrading to SA 3.4.3 as soon as possible is the recommended fix but details will not be shared publicly.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade spamassassin | May 4, 2022 | Dec 12, 2019 |
| Alpine Linux | — | Upgrade spamassassin | Jan 3, 2020 | Dec 12, 2019 |
| Amazon Linux Ami 2 | — | Upgrade spamassassinUpgrade spamassassin-debuginfo | Oct 28, 2020 | Dec 12, 2019 |
| Amazon_linux | — | Upgrade spamassassin | Feb 8, 2020 | Dec 12, 2019 |
| Centos_linux | — | Upgrade spamassassinUpgrade spamassassin-debugsourceUpgrade spamassassin-debuginfo | Oct 1, 2020 | Dec 12, 2019 |
| Debian | — | Upgrade spamassassin | Dec 16, 2019 | Dec 12, 2019 |
| Freebsd | — | Upgrade spamassassin | Dec 14, 2019 | Dec 13, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade spamassassin | Feb 22, 2021 | Dec 12, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade spamassassin | Jan 20, 2021 | Dec 12, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade spamassassin | Nov 2, 2020 | Dec 12, 2019 |
| Oracle_linux | — | Upgrade spamassassin | Oct 7, 2020 | Dec 12, 2019 |
| Redhat_linux | — | Upgrade spamassassinUpgrade spamassassin-debugsourceNo solution existsUpgrade spamassassin-debuginfo | Oct 1, 2020 | Dec 12, 2019 |
| Suse | — | Upgrade spamassassinUpgrade perl-mail-spamassassin-plugin-ixhash2Upgrade perl-mail-spamassassin | Apr 13, 2021 | Dec 12, 2019 |
| Ubuntu | — | Upgrade spamassassinUpgrade spamassassin (Ubuntu Pro) | Jan 14, 2020 | Dec 12, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub