Apache Spamassassin vulnerabilities

• apache spamassassin, debian linux, fedoraproject fedora +2 more Apache SpamAssassin has an OS Command Injection vulnerability CVE-2020-1946 Fix available 9.8 CriticalDecember 31, 2020
• apache spamassassin A command execution issue was found in Apache SpamAssassin prior to 3.4.3. Carefully crafted... CVE-2020-1930 Fix available 8.1 HighJanuary 30, 2020
• apache spamassassin A command execution issue was found in Apache SpamAssassin prior to 3.4.3. Carefully crafted... CVE-2020-1931 Fix available 8.1 HighJanuary 30, 2020
• apache spamassassin, debian linux +1 more In Apache SpamAssassin before 3.4.3, a message can be crafted in a way to use excessive resources... CVE-2019-12420 Fix available 7.5 HighDecember 12, 2019
• apache spamassassin, debian linux +1 more In Apache SpamAssassin before 3.4.3, nefarious CF files can be configured to run system commands... CVE-2018-11805 Fix available 6.7 MediumDecember 12, 2019
• apache spamassassin, canonical ubuntu linux, debian linux +4 more +6 more Apache SpamAssassin 3.4.2 fixes a local user code injection in the meta rule syntax. CVE-2018-11781 Fix available 7.8 HighSeptember 17, 2018
• apache spamassassin, pdfinfo project pdfinfo, canonical ubuntu linux +1 more +3 more A potential Remote Code Execution bug exists with the PDFInfo plugin in Apache SpamAssassin... CVE-2018-11780 Fix available EPSS 10.8% 9.8 CriticalSeptember 17, 2018
• apache spamassassin, canonical ubuntu linux, debian linux +4 more +6 more A denial of service vulnerability was identified that exists in Apache SpamAssassin before 3.4.2.... CVE-2017-15705 Fix available 5.3 MediumSeptember 17, 2018
• perl, apache spamassassin, debian linux +2 more +4 more (1) cpan/Archive-Tar/bin/ptar, (2) cpan/Archive-Tar/bin/ptardiff, (3) cpan/Archive-Tar/bin... CVE-2016-1238 Fix available 7.8 HighJuly 25, 2016
• apache spamassassin Apache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long... CVE-2007-0451 Fix available 4.3 MediumFebruary 16, 2007
• apache spamassassin SpamAssassin before 3.1.3, when running with vpopmail and the paranoid (-P) switch, allows remote... CVE-2006-2447 Public exploitFix available EPSS 75.8% 5.1 MediumJune 6, 2006
• apache spamassassin SpamAssassin 3.0.4 allows attackers to bypass spam detection via an e-mail with a large number of... CVE-2005-3351 Fix available 5.0 MediumNovember 20, 2005
• apache spamassassin Apache SpamAssassin 3.0.1, 3.0.2, and 3.0.3 allows remote attackers to cause a denial of service ... CVE-2005-1266 Fix available 5.0 MediumJune 15, 2005