Apache Software Foundation Spamassassin vulnerabilities

• apache spamassassin, debian linux, fedoraproject fedora +2 more Apache SpamAssassin has an OS Command Injection vulnerability CVE-2020-1946 Fix available 9.8 CriticalDecember 31, 2020
• apache spamassassin A command execution issue was found in Apache SpamAssassin prior to 3.4.3. Carefully crafted... CVE-2020-1930 Fix available 8.1 HighJanuary 30, 2020
• apache spamassassin A command execution issue was found in Apache SpamAssassin prior to 3.4.3. Carefully crafted... CVE-2020-1931 Fix available 8.1 HighJanuary 30, 2020
• apache spamassassin, debian linux +1 more In Apache SpamAssassin before 3.4.3, a message can be crafted in a way to use excessive resources... CVE-2019-12420 Fix available 7.5 HighDecember 12, 2019
• apache spamassassin, debian linux +1 more In Apache SpamAssassin before 3.4.3, nefarious CF files can be configured to run system commands... CVE-2018-11805 Fix available 6.7 MediumDecember 12, 2019
• apache spamassassin, canonical ubuntu linux, debian linux +4 more +6 more Apache SpamAssassin 3.4.2 fixes a local user code injection in the meta rule syntax. CVE-2018-11781 Fix available 7.8 HighSeptember 17, 2018
• apache spamassassin, pdfinfo project pdfinfo, canonical ubuntu linux +1 more +3 more A potential Remote Code Execution bug exists with the PDFInfo plugin in Apache SpamAssassin... CVE-2018-11780 Fix available EPSS 10.8% 9.8 CriticalSeptember 17, 2018
• apache spamassassin, canonical ubuntu linux, debian linux +4 more +6 more A denial of service vulnerability was identified that exists in Apache SpamAssassin before 3.4.2.... CVE-2017-15705 Fix available 5.3 MediumSeptember 17, 2018