Vulnerabilities

TI-2018-08438 CVE-2018-11781 · GHSA-qvvf-537j-pvg4

Apache SpamAssassin 3.4.2 fixes a local user code injection in the meta rule syntax.

LOW 36

Apache SpamAssassin 3.4.2 fixes a local user code injection in the meta rule syntax.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00984 Published 2018-09-17 Partial fix · 3.4.2 CWE-94

TI-2018-08437 CVE-2018-11780 · GHSA-ph2p-v983-f856

MEDIUM 55

A potential Remote Code Execution bug exists with the PDFInfo plugin in Apache SpamAssassin before 3.4.2.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.1082 Published 2018-09-17 Fixed in 3.4.2 CWE-94

TI-2017-11478 CVE-2017-15705 · GHSA-m63q-qrvc-wwrm

LOW 35

A denial of service vulnerability was identified that exists in Apache SpamAssassin before 3.4.2.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.07879 Published 2018-09-17 Partial fix · 3.4.2 CWE-20