正文

Apache SpamAssassin 资源管理错误漏洞

admin
admin V管理员 /0 评论 /14 阅读
0302
此篇文章发布距今已超过1217天，您需要注意文章的内容或图片是否可用！

漏洞信息详情

Apache SpamAssassin 资源管理错误漏洞

  • CNNVD编号：CNNVD-201912-663
    • <!--
  • 危害等级： 高危-->
  • 危害等级： 高危
  • CVE编号： CVE-2019-12420
  • 漏洞类型： 资源管理错误
  • 发布时间： 2019-12-12
  • 威胁类型： 远程
  • 更新时间： 2021-04-15
  • 厂        商：
  • 漏洞来源： Ubuntu,Debian,Red ...

漏洞简介

Apache SpamAssassin是美国阿帕奇（Apache）基金会的一款开源的垃圾邮件过滤器。该产品为系统管理员提供了一个过滤器，并支持对电子邮件进行分类阻止垃圾邮件。

Apache SpamAssassin 3.4.3之前版本中存在安全漏洞。攻击者可借助特制的消息利用该漏洞消耗大量资源。

漏洞公告

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：

https://svn.apache.org/repos/asf/spamassassin/branches/3.4/build/announcements/3.4.3.txt

参考网址

来源:lists.apache.org

链接:https://lists.apache.org/thread.html/e3c2367351286b77a74a082e2b66b793cceefa7b6ea9dcd162db4c4b@%3Cdev.spamassassin.apache.org%3E

来源:MLIST

链接:https://lists.apache.org/thread.html/5863d6c42fc9595a29566732f12348cde0ca0e41bda91695c62041de@%3Cannounce.apache.org%3E

来源:MLIST

链接:http://www.openwall.com/lists/oss-security/2019/12/12/2

来源:MISC

链接:https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7747

来源:MLIST

链接:https://lists.apache.org/thread.html/5ef362d6da12126fafc81443309ca95d872d1bfd011fe4b2699f0fe9@%3Cusers.spamassassin.apache.org%3E

来源:MLIST

链接:https://lists.apache.org/thread.html/64cf76749956dd08f7d5b86ec9f3321f382cfd7fe717ccd1be940c92@%3Cannounce.spamassassin.apache.org%3E

来源:MLIST

链接:https://lists.debian.org/debian-lts-announce/2019/12/msg00019.html

来源:UBUNTU

链接:https://usn.ubuntu.com/4237-2/

来源:UBUNTU

链接:https://usn.ubuntu.com/4237-1/

来源:svn.apache.org

链接:https://svn.apache.org/repos/asf/spamassassin/branches/3.4/build/announcements/3.4.3.txt

来源:BUGTRAQ

链接:https://seclists.org/bugtraq/2019/Dec/27

来源:DEBIAN

链接:https://www.debian.org/security/2019/dsa-4584

来源:usn.ubuntu.com

链接:https://usn.ubuntu.com/4237-2/

来源:usn.ubuntu.com

链接:https://usn.ubuntu.com/4237-1/

来源:www.debian.org

链接:https://www.debian.org/security/2019/dsa-4584

来源:www.suse.com

链接:https://www.suse.com/support/update/announcement/2019/suse-su-20193296-1.html

来源:www.suse.com

链接:https://www.suse.com/support/update/announcement/2019/suse-su-20193297-1.html

来源:www.suse.com

链接:https://www.suse.com/support/update/announcement/2019/suse-su-20193309-1.html

来源:www.suse.com

链接:https://www.suse.com/support/update/announcement/2019/suse-su-20193310-1.html

来源:nvd.nist.gov

链接:https://nvd.nist.gov/vuln/detail/CVE-2019-12420

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.3347/

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/159834/Red-Hat-Security-Advisory-2020-4625-01.html

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/155933/Ubuntu-Security-Notice-USN-4237-1.html

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2019.4667/

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/155679/Debian-Security-Advisory-4584-1.html

来源:vigilance.fr

链接:https://vigilance.fr/vulnerability/Apache-SpamAssassin-denial-of-service-via-Security-Note-31159

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/155957/Ubuntu-Security-Notice-USN-4237-2.html

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.0166/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.0132/

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/159374/Red-Hat-Security-Advisory-2020-3973-01.html

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2019.4667.2/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.1232

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.3881/

受影响实体

    暂无


补丁

  • Apache SpamAssassin 资源管理错误漏洞的修复措施
    <!--
    2019-12-12
    -->