Уязвимость CVE-2019-12420: Информация

Описание

In Apache SpamAssassin before 3.4.3, a message can be crafted in a way to use excessive resources. Upgrading to SA 3.4.3 as soon as possible is the recommended fix but details will not be shared publicly.

Важность: HIGH (7,5) Вектор: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

URL: https://nvd.nist.gov/vuln/detail/CVE-2019-12420
Опубликовано: 13 декабря 2019 г.
Изменено: 7 ноября 2023 г.
Идентификатор типа ошибки: CWE-400

Исправленные пакеты

Имя пакета
Ветка
Исправлено в версии
Версия в репозитории
Errata ID
№ Задания
Состояние
spamassassinsisyphus3.4.3-alt14.0.0-alt1.1ALT-PU-2020-1004-1243781Исправлено
spamassassinp103.4.3-alt13.4.5-alt2ALT-PU-2020-1004-1243781Исправлено
spamassassinp93.4.3-alt13.4.5-alt1ALT-PU-2020-1038-1243805Исправлено
spamassassinp83.4.3-alt13.4.4-alt2ALT-PU-2020-1054-1243806Исправлено
spamassassinc10f13.4.3-alt13.4.5-alt2ALT-PU-2020-1004-1243781Исправлено
spamassassinc9f23.4.3-alt13.4.5-alt1ALT-PU-2020-1038-1243805Исправлено
spamassassin-rulessisyphus3.4.3-alt14.0.0-alt1ALT-PU-2020-1005-1243781Исправлено
spamassassin-rulesp103.4.3-alt13.4.5-alt1ALT-PU-2020-1005-1243781Исправлено
spamassassin-rulesp93.4.3-alt13.4.5-alt1ALT-PU-2020-1039-1243805Исправлено
spamassassin-rulesp83.4.3-alt13.4.4-alt1ALT-PU-2020-1055-1243806Исправлено
spamassassin-rulesc10f13.4.3-alt13.4.5-alt1ALT-PU-2020-1005-1243781Исправлено
spamassassin-rulesc9f23.4.3-alt13.4.5-alt1ALT-PU-2020-1039-1243805Исправлено

Ссылки на рекомендации, решения и инструменты

Ссылка
Ресурс
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7747
  • Permissions Required
https://svn.apache.org/repos/asf/spamassassin/branches/3.4/build/announcements/3.4.3.txt
  • Mailing List
  • Vendor Advisory
[oss-security] 20191212 Apache SpamAssassin v3.4.3 released with fix for CVE-2019-12420
  • Mailing List
  • Third Party Advisory
DSA-4584
  • Third Party Advisory
20191216 [SECURITY] [DSA 4584-1] spamassassin security update
  • Mailing List
  • Third Party Advisory
[debian-lts-announce] 20191216 [SECURITY] [DLA 2037-1] spamassassin security update
  • Mailing List
  • Third Party Advisory
USN-4237-1
    USN-4237-2
      [spamassassin-announce] 20191212 [SECURITY] Apache SpamAssassin v3.4.3 released with fix for CVE-2019-12420
        [spamassassin-dev] 20191212 [SECURITY] Apache SpamAssassin v3.4.3 released with fix for CVE-2019-12420
          [spamassassin-users] 20191212 [SECURITY] Apache SpamAssassin v3.4.3 released with fix for CVE-2019-12420
            [announce] 20191212 [SECURITY] Apache SpamAssassin v3.4.3 released with fix for CVE-2019-12420
              [spamassassin-users] 20200130 Re: ANNOUNCE: Apache SpamAssassin 3.4.4 available
                [spamassassin-users] 20200131 Re: ANNOUNCE: Apache SpamAssassin 3.4.4 available

                    1. Конфигурация 1

                      cpe:2.3:a:apache:spamassassin:*:*:*:*:*:*:*:*
                      End excliding
                      3.4.3

                      Конфигурация 2

                      cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
                      cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
                      cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
                  VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
                  Версия: v24.4.2
                  Наверх