| Max CVSS | 9.3 | Min CVSS | 5.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2020-1930 | 9.3 |
A command execution issue was found in Apache SpamAssassin prior to 3.4.3. Carefully crafted nefarious rule configuration (.cf) files can be configured to run system commands similar to CVE-2018-11805. With this bug unpatched, exploits can be injecte
|
02-02-2020 - 04:15 | 30-01-2020 - 18:15 | |
| CVE-2020-1931 | 9.3 |
A command execution issue was found in Apache SpamAssassin prior to 3.4.3. Carefully crafted nefarious Configuration (.cf) files can be configured to run system commands similar to CVE-2018-11805. This issue is less stealthy and attempts to exploit t
|
02-02-2020 - 04:15 | 30-01-2020 - 18:15 | |
| CVE-2019-12420 | 5.0 |
In Apache SpamAssassin before 3.4.3, a message can be crafted in a way to use excessive resources. Upgrading to SA 3.4.3 as soon as possible is the recommended fix but details will not be shared publicly.
|
13-01-2020 - 19:15 | 12-12-2019 - 23:15 | |
| CVE-2018-11805 | 7.2 |
In Apache SpamAssassin before 3.4.3, nefarious CF files can be configured to run system commands without any output or errors. With this, exploits can be injected in a number of scenarios. In addition to upgrading to SA 3.4.3, we recommend that users
|
13-01-2020 - 19:15 | 12-12-2019 - 23:15 |