1. Gentoo Linux Security Advisory
| Advisory Reference | GLSA 200703-02 / spamassassin |
| Release Date | March 02, 2007 |
| Latest Revision | March 02, 2007: 01 |
| Impact | normal |
| Exploitable | remote |
| Package | Vulnerable versions | Unaffected versions | Architecture(s) |
| mail-filter/spamassassin | < 3.1.8 | >= 3.1.8 | All supported architectures |
Related bugreports: #166969
SpamAssassin is vulnerable to a Denial of Service attack.
SpamAssassin is an extensible email filter used to identify junk email.
SpamAssassin does not correctly handle very long URIs when scanning emails.
An attacker could cause SpamAssassin to consume large amounts of CPU and memory resources by sending one or more emails containing very long URIs.
There is no known workaround at this time.
All SpamAssassin users should upgrade to the latest version.
Code Listing 3.1: Resolution |
# emerge --sync # emerge --ask --oneshot --verbose ">=mail-filter/spamassassin-3.1.8" |