Not rated
CVE-2019-12420 In Apache SpamAssassin before 3.4.3, a message can be crafted in a way to use excessive resources
Description
In Apache SpamAssassin before 3.4.3, a message can be crafted in a way to use excessive resources. Upgrading to SA 3.4.3 as soon as possible is the recommended fix but details will not be shared publicly.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache SpamAssassin | Versions not published |
References
- [spamassassin-announce] 20191212 [SECURITY] Apache SpamAssassin v3.4.3 released with fix for CVE-2019-12420 lists.apache.org
- [spamassassin-dev] 20191212 [SECURITY] Apache SpamAssassin v3.4.3 released with fix for CVE-2019-12420 lists.apache.org
- [spamassassin-users] 20191212 [SECURITY] Apache SpamAssassin v3.4.3 released with fix for CVE-2019-12420 lists.apache.org
- [oss-security] 20191212 Apache SpamAssassin v3.4.3 released with fix for CVE-2019-12420 www.openwall.com
- [announce] 20191212 [SECURITY] Apache SpamAssassin v3.4.3 released with fix for CVE-2019-12420 lists.apache.org
- svn.apache.org svn.apache.org
- bz.apache.org bz.apache.org
- DSA-4584 www.debian.org
- 20191216 [SECURITY] [DSA 4584-1] spamassassin security update seclists.org
- [debian-lts-announce] 20191216 [SECURITY] [DLA 2037-1] spamassassin security update lists.debian.org
- USN-4237-1 usn.ubuntu.com
- USN-4237-2 usn.ubuntu.com
- [spamassassin-users] 20200130 Re: ANNOUNCE: Apache SpamAssassin 3.4.4 available lists.apache.org
- [spamassassin-users] 20200131 Re: ANNOUNCE: Apache SpamAssassin 3.4.4 available lists.apache.org
Timeline
- Published
- Last modified