Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/spamassassin@3.1.7-2?distro=trixie
purl pkg:deb/debian/spamassassin@3.1.7-2?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-f9dw-s4kb-27at Off-by-one buffer overflow in spamc of SpamAssassin 2.40 through 2.43, when using BSMTP mode ("-B"), allows remote attackers to execute arbitrary code via email containing headers with leading "." characters. CVE-2003-1557
VCID-kzdw-xgcr-p3fe SpamAssassin is vulnerable to a Denial of Service attack. CVE-2007-0451

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T13:10:20.921930+00:00 Debian Importer Fixing VCID-f9dw-s4kb-27at https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T10:43:04.988944+00:00 Debian Importer Fixing VCID-kzdw-xgcr-p3fe https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T09:03:46.472791+00:00 Debian Importer Fixing VCID-f9dw-s4kb-27at https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T07:14:55.307039+00:00 Debian Importer Fixing VCID-kzdw-xgcr-p3fe https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:53:10.175420+00:00 Debian Importer Fixing VCID-kzdw-xgcr-p3fe https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:53:09.945122+00:00 Debian Importer Fixing VCID-f9dw-s4kb-27at https://security-tracker.debian.org/tracker/data/json 38.1.0