CVE-2007-0451 Apache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long URLs in malformed HTML, which triggers "massive memory usage."
MediumCVSS 4.3
EPSS 6.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Apache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long URLs in malformed HTML, which triggers "massive memory usage."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apache spamassassin | <= 3.1.7 | No fix listed |
| apache spamassassin | = 3.0.1 | No fix listed |
| apache spamassassin | = 3.0.2 | No fix listed |
| apache spamassassin | = 3.0.3 | No fix listed |
| apache spamassassin | = 3.0.4 | No fix listed |
| apache spamassassin | = 3.1.0 | No fix listed |
| apache spamassassin | = 3.1.1 | No fix listed |
| apache spamassassin | = 3.1.2 | No fix listed |
| debian/spamassassin(Debian:12) | < 3.1.7-2 | 3.1.7-2 |
| debian/spamassassin(Debian:13) | < 3.1.7-2 | 3.1.7-2 |
| debian/spamassassin(Debian:14) | < 3.1.7-2 | 3.1.7-2 |
References
- FEDORA-2007-242 patch vendor-advisory
- FEDORA-2007-241 patch vendor-advisory
- 33207 vdb-entry
- RHSA-2007:0074 vendor-advisory
- 24197 third-party-advisory vendor-advisory
- 24200 third-party-advisory vendor-advisory
- 24250 third-party-advisory vendor-advisory
- 24256 third-party-advisory vendor-advisory
- 24265 third-party-advisory vendor-advisory
- 24307 third-party-advisory vendor-advisory
- 24889 third-party-advisory vendor-advisory
- GLSA-200703-02 vendor-advisory
- spamassassin.apache.org
- svn.apache.org
- MDKSA-2007:049 vendor-advisory
- SUSE-SR:2007:006 vendor-advisory
- RHSA-2007:0075 vendor-advisory
- 22584 patch vdb-entry
- 1017666 vdb-entry
- ADV-2007-0628 vdb-entry vendor-advisory
- spamassassin-url-dos(32536) vdb-entry
- issues.rpath.com
- oval:org.mitre.oval:def:10018 signature vdb-entry
- Debian Security Tracker CVE-2007-0451 vendor-advisory
- bugs.debian.org issue-tracking