cbcvebase.
CVE-2007-0451
published 2007-02-16

CVE-2007-0451: Apache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long URLs in malformed HTML, which triggers "massive memory usage."

medium4.3CVSS 3.1
AVNACMAuNCNINAP
Apache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long URLs in malformed HTML, which triggers "massive memory usage."

Affected

13 ranges
VendorProductVersion rangeFixed in
apachespamassassin<= 3.1.7
apachespamassassin
apachespamassassin
apachespamassassin
apachespamassassin
apachespamassassin
apachespamassassin
apachespamassassin
apachespamassassin>= 0 < 3.1.7-23.1.7-2
apachespamassassin>= 0 < 3.1.7-23.1.7-2
apachespamassassin>= 0 < 3.1.7-23.1.7-2
apachespamassassin>= 0 < 3.1.7-23.1.7-2
debianspamassassin< spamassassin 3.1.7-2 (bookworm)spamassassin 3.1.7-2 (bookworm)

CVSS provenance

nvd4.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
osv4.3MEDIUM