Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2018:0173-1

Опубликовано: 22 янв. 2018
Источник: suse-cvrf

Описание

Security update for procmail

This update for procmail fixes the following issues:

  • CVE-2017-16844: Heap-based buffer overflow in loadbuf function could lead to remote denial of service (bsc#1068648)

Список пакетов

SUSE Linux Enterprise Desktop 12 SP2
procmail-3.22-269.3.5
SUSE Linux Enterprise Desktop 12 SP3
procmail-3.22-269.3.5
SUSE Linux Enterprise Server 12 SP2
procmail-3.22-269.3.5
SUSE Linux Enterprise Server 12 SP3
procmail-3.22-269.3.5
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2
procmail-3.22-269.3.5
SUSE Linux Enterprise Server for SAP Applications 12 SP2
procmail-3.22-269.3.5
SUSE Linux Enterprise Server for SAP Applications 12 SP3
procmail-3.22-269.3.5

Ссылки

Описание

Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted e-mail message because of a hardcoded realloc size, a different vulnerability than CVE-2014-3618.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP2:procmail-3.22-269.3.5
SUSE Linux Enterprise Desktop 12 SP3:procmail-3.22-269.3.5
SUSE Linux Enterprise Server 12 SP2:procmail-3.22-269.3.5
SUSE Linux Enterprise Server 12 SP3:procmail-3.22-269.3.5
Ссылки