Description
SpamAssassin 3.0.4 allows attackers to bypass spam detection via an e-mail with a large number of recipients ("To" addresses), which triggers a bus error in Perl.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | spamassassin | 3.1.0a-1 | — |
| Debian 13 | spamassassin | 3.1.0a-1 | — |
| Debian 12 | spamassassin | 3.1.0a-1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | spamassassin | 3.0.5-3.el4 | RHSA-2006:0129 |
Advisories 1
- RHSA-2006:0129 Red Hat Security Advisory: spamassassin security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- spamassassin-message-recipients-dos(23048) vdb-entry
- 17518 third-party-advisory
- http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4570
- 17666 third-party-advisory
- 17626 third-party-advisory
- 19158 third-party-advisory
- 17386 third-party-advisory
- 15373 vdb-entry
- FEDORA-2005-1065 vendor-advisory
- [spamassassin-devel] 20051101 [Bug 4570] Mail with lots of To addresses in header triggers Bus error in Perl [CVE-2005-3351] mailing-list
- oval:org.mitre.oval:def:11125 vdb-entry signature
- RHSA-2006:0129 vendor-advisory
- MDKSA-2005:221 vendor-advisory
- ADV-2005-2364 vdb-entry
- 11581 vdb-entry
- SUSE-SR:2005:027 vendor-advisory
- 17877 third-party-advisory