spamassassin (SUSE:Linux Enterprise Desktop 12 SP4) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Desktop 12 SP4 package spamassassin, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (4)

• CVE-2018-11780 — CVSS 9.8 (critical): A potential Remote Code Execution bug exists with the PDFInfo plugin in Apache SpamAssassin before 3.4.2.
• CVE-2016-1238 — CVSS 7.8 (high): (1) cpan/Archive-Tar/bin/ptar, (2) cpan/Archive-Tar/bin/ptardiff, (3) cpan/Archive-Tar/bin/ptargrep, (4) cpan/CPAN/scripts/cpan, (5)…
• CVE-2018-11781 — CVSS 7.8 (high): Apache SpamAssassin 3.4.2 fixes a local user code injection in the meta rule syntax.
• CVE-2017-15705 — CVSS 5.3 (medium): A denial of service vulnerability was identified that exists in Apache SpamAssassin before 3.4.2. The vulnerability arises with certain…