Known vulnerabilities in spamassassin (Debian package) 3.4.2-1~deb9u1

Vendor: Debian
Version: 3.4.2-1~deb9u1
Software CPE: cpe:2.3:o:debian:spamassassin_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 5
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting spamassassin (Debian package) version 3.4.2-1~deb9u1 spamassassin (Debian package) 3.4.2-1~deb9u1 is affected by 5 vulnerabilities: 4 medium, 1 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU51703 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-1946
CWE-78 Medium
No
No
3.4.2-1+deb10u3 24.03.2021 SB2021032412
SB2021032901
SB2021040168
and 10 more
#VU24820 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-1931
CWE-78 Medium
No
No
3.4.2-1+deb10u2, 3.4.2-1~deb9u3 02.02.2020 SB2020020201
SB2020020202
SB2020040407
and 4 more
#VU24819 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-1930
CWE-78 Medium
No
No
3.4.2-1+deb10u2, 3.4.2-1~deb9u3 02.02.2020 SB2020020201
SB2020020202
SB2020040407
and 4 more
#VU23601 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2018-11805
CWE-78 Low
No
No
3.4.2-1+deb10u1, 3.4.2-1~deb9u2 13.12.2019 SB2019121311
SB2019121501
SB2020011316
and 4 more
#VU23600 - Improper input validation
CVE-2019-12420
CWE-20 Medium
No
No
3.4.2-1+deb10u1, 3.4.2-1~deb9u2 13.12.2019 SB2019121311
SB2019121501
SB2020011316
and 7 more