Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2017:3231-1

Опубликовано: 07 дек. 2017
Источник: suse-cvrf

Описание

Security update for procmail

This update for procmail fixes the following issues:

Security issue fixed:

  • CVE-2017-16844: Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted e-mail message because of a hardcoded realloc size, a different vulnerability than CVE-2014-3618. (bnc#1068648)

Список пакетов

SUSE Linux Enterprise Server 11 SP4
procmail-3.22-240.8.3.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4
procmail-3.22-240.8.3.1

Ссылки

Описание

Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted e-mail message because of a hardcoded realloc size, a different vulnerability than CVE-2014-3618.

Затронутые продукты
SUSE Linux Enterprise Server 11 SP4:procmail-3.22-240.8.3.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4:procmail-3.22-240.8.3.1
Ссылки
Уязвимость SUSE-SU-2017:3231-1