CVE-2017-16844
- State
- Published
- Severity
- Not scored
- Published
- Nov 16, 2017
- Updated
- Aug 5, 2024
- Reserved
- Nov 16, 2017
Description
Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted e-mail message because of a hardcoded realloc size, a different vulnerability than CVE-2014-3618.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- [debian-lts-announce] 20171118 [SECURITY] [DLA 1173-1] procmail security updatemailing-list
- RHSA-2017:3269vendor-advisory
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=876511
- DSA-4041vendor-advisory
- 1039844vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.