Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-16844

Опубликовано: 16 нояб. 2017
Источник: nvd
CVSS3: 9.8
CVSS2: 10
EPSS Средний

Описание

Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted e-mail message because of a hardcoded realloc size, a different vulnerability than CVE-2014-3618.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:procmail:procmail:3.22:*:*:*:*:*:*:*

EPSS

Процентиль: 94%
0.14128
Средний

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 7 лет назад

Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted e-mail message because of a hardcoded realloc size, a different vulnerability than CVE-2014-3618.

CVSS3: 7.5
redhat
почти 8 лет назад

Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted e-mail message because of a hardcoded realloc size, a different vulnerability than CVE-2014-3618.

CVSS3: 9.8
msrc
больше 3 лет назад

Описание отсутствует

CVSS3: 9.8
debian
больше 7 лет назад

Heap-based buffer overflow in the loadbuf function in formisc.c in for ...

suse-cvrf
больше 7 лет назад

Security update for procmail

EPSS

Процентиль: 94%
0.14128
Средний

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-119