Known vulnerabilities in spamassassin (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:spamassassin_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting spamassassin (Ubuntu package) spamassassin (Ubuntu package) is affected by 3 known vulnerabilities: 2 medium, 1 low Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU51703 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-1946
CWE-78 Medium
No
No
3.4.2-0ubuntu0.14.04.1+esm3, 3.4.2-0ubuntu0.16.04.5, 3.4.2-0ubuntu0.18.04.5, 3.4.4-1ubuntu1.1 24.03.2021 SB2021032412
SB2021032901
SB2021040168
and 10 more
#VU23601 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2018-11805
CWE-78 Low
No
No
3.4.2-0ubuntu0.16.04.2, 3.4.2-0ubuntu0.18.04.2, 3.4.2-1ubuntu0.19.04.1, 3.4.2-1ubuntu0.19.10.1 13.12.2019 SB2019121311
SB2019121501
SB2020011316
and 4 more
#VU23600 - Improper input validation
CVE-2019-12420
CWE-20 Medium
No
No
3.4.2-0ubuntu0.16.04.2, 3.4.2-0ubuntu0.18.04.2, 3.4.2-1ubuntu0.19.04.1, 3.4.2-1ubuntu0.19.10.1 13.12.2019 SB2019121311
SB2019121501
SB2020011316
and 7 more