Known vulnerabilities in spamassassin (Debian package) 3.4.2-1~deb9u2

Vendor: Debian
Version: 3.4.2-1~deb9u2
Software CPE: cpe:2.3:o:debian:spamassassin_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 7.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting spamassassin (Debian package) version 3.4.2-1~deb9u2 spamassassin (Debian package) 3.4.2-1~deb9u2 is affected by 3 vulnerabilities: 3 medium Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU51703 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-1946
CWE-78 Medium
No
No
3.4.2-1+deb10u3 24.03.2021 SB2021032412
SB2021032901
SB2021040168
and 10 more
#VU24820 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-1931
CWE-78 Medium
No
No
3.4.2-1+deb10u2, 3.4.2-1~deb9u3 02.02.2020 SB2020020201
SB2020020202
SB2020040407
and 4 more
#VU24819 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-1930
CWE-78 Medium
No
No
3.4.2-1+deb10u2, 3.4.2-1~deb9u3 02.02.2020 SB2020020201
SB2020020202
SB2020040407
and 4 more