CVE-2017-16844 procmail [Jakub Wilk reported ...]

Thread View: pl.comp.mail.mta

1 messages

[T] Back to Threads [V] Tree View [G] Group Articles

1 total messages Started by Andrzej A. Filip Mon, 20 Nov 2017 06:45

#62501

Author: Andrzej A. Filip
Date: Mon, 20 Nov 2017 06:45

18 lines
1777 bytes

https://www.debian.org/security/2017/dsa-4041
> DSA-4041-1 procmail -- security update
> Date Reported: 19 Nov 2017
> Affected Packages: procmail 
> Vulnerable: Yes
> Security database references:
>    In the Debian bugtracking system: Bug 876511 [1].
>    In Mitre's CVE dictionary: CVE-2017-16844 [2].
> More information:
>    Jakub Wilk reported a heap-based buffer overflow vulnerability in
>    procmail's formail utility when processing specially-crafted email
>    headers. A remote attacker could use this flaw to cause formail to
>    crash, resulting in a denial of service or data loss. [...]
> [1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=876511
> [2] https://security-tracker.debian.org/tracker/CVE-2017-16844

-- 
Andrzej A. Filip

Thread Navigation

This is a paginated view of messages in the thread with full content displayed inline.

Messages are displayed in chronological order, with the original post highlighted in green.

Use pagination controls to navigate through all messages in large threads.

Back to All Threads