CVE-2019-12420
- State
- Published
- Severity
- Not scored
- Published
- Dec 12, 2019
- Updated
- Aug 4, 2024
- Reserved
- May 28, 2019
Description
In Apache SpamAssassin before 3.4.3, a message can be crafted in a way to use excessive resources. Upgrading to SA 3.4.3 as soon as possible is the recommended fix but details will not be shared publicly.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
Apache SpamAssassinApache |
|
References
- [spamassassin-announce] 20191212 [SECURITY] Apache SpamAssassin v3.4.3 released with fix for CVE-2019-12420mailing-list
- [spamassassin-dev] 20191212 [SECURITY] Apache SpamAssassin v3.4.3 released with fix for CVE-2019-12420mailing-list
- [spamassassin-users] 20191212 [SECURITY] Apache SpamAssassin v3.4.3 released with fix for CVE-2019-12420mailing-list
- [oss-security] 20191212 Apache SpamAssassin v3.4.3 released with fix for CVE-2019-12420mailing-list
- [announce] 20191212 [SECURITY] Apache SpamAssassin v3.4.3 released with fix for CVE-2019-12420mailing-list
- https://svn.apache.org/repos/asf/spamassassin/branches/3.4/build/announcements/3.4.3.txt
- https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7747
- DSA-4584vendor-advisory
- 20191216 [SECURITY] [DSA 4584-1] spamassassin security updatemailing-list
- [debian-lts-announce] 20191216 [SECURITY] [DLA 2037-1] spamassassin security updatemailing-list
- USN-4237-1vendor-advisory
- USN-4237-2vendor-advisory
- [spamassassin-users] 20200130 Re: ANNOUNCE: Apache SpamAssassin 3.4.4 availablemailing-list
- [spamassassin-users] 20200131 Re: ANNOUNCE: Apache SpamAssassin 3.4.4 availablemailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.