Known vulnerabilities in spamassassin (Alpine package)

Known vulnerabilities in spamassassin (Alpine package)

Vendor: Alpine Linux Development Team

Software: spamassassin (Alpine package)

Software CPE: cpe:2.3:o:alpine:spamassassin_alpine_package:*:*:*:*:*:alpine_linux:*:*

Website: https://alpinelinux.org/

Total vulnerabilities: 8

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Vulnerabilities (8)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU51703 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2020-1946	CWE-78	Medium	No	No	-	24.03.2021	SB2021032412 SB2021032901 SB2021040168 and 10 more
#VU24820 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2020-1931	CWE-78	Medium	No	No	3.4.4-r0	02.02.2020	SB2020020201 SB2020020202 SB2020040407 and 4 more
#VU24819 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2020-1930	CWE-78	Medium	No	No	3.4.4-r0	02.02.2020	SB2020020201 SB2020020202 SB2020040407 and 4 more
#VU23601 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2018-11805	CWE-78	Low	No	No	3.4.3-r0	13.12.2019	SB2019121311 SB2019121501 SB2020011316 and 4 more
#VU23600 - Improper input validation CVE-2019-12420	CWE-20	Medium	No	No	3.4.3-r0	13.12.2019	SB2019121311 SB2019121501 SB2020011316 and 7 more
#VU16549 - Improper input validation CVE-2017-15705	CWE-20	Low	No	No	3.4.2-r0, 3.4.3-r0	15.12.2018	SB2018121702 SB2018101909 SB2019080608 and 8 more
#VU16311 - Improper Control of Generation of Code ('Code Injection') CVE-2018-11781	CWE-94	Low	No	No	3.4.2-r0, 3.4.3-r0	06.12.2018	SB2018091602 SB2018121702 SB2018101909 and 9 more
#VU16310 - Improper input validation CVE-2018-11780	CWE-20	High	No	No	3.4.2-r0, 3.4.3-r0	05.12.2018	SB2018091602 SB2018121702 SB2018101909 and 8 more