Logo
componentprocmail
Name
procmail
Version
3.22
Type
library
Description
Mail processing program
Licenses
GPL-2.0-only & Artistic-1.0
PURL
-
CPE
cpe:2.3:*:*:procmail:3.22:*:*:*:*:*:*:*

Other Versions#


Project
Branch
Version
master
3.24
scarthgap
3.22

Patches#


#
Title
Author
Resolve
1
From debian to modify parameters
Li xin <lixin.fnst@cn.fujitsu.com>
2
Fix heap-based buffer overflow in loadbuf()
Santiago Vila <sanvila@debian.org>
CVE-2017-16844
3
From debian to fix compile errors
Li xin <lixin.fnst@cn.fujitsu.com>
4
Patch #4
Peter Marko <peter.marko@siemens.com>
CVE-2014-3618
5
man file mailstat.1 from debian
Li xin <lixin.fnst@cn.fujitsu.com>
6
From debian to fix man file
Li xin <lixin.fnst@cn.fujitsu.com>

Vulnerabilities#


Name
Analysis
Description
Patched
Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted e-mail message because of a hardcoded realloc size, a different vulnerability than CVE-2014-3618.
Patched
Heap-based buffer overflow in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted email header, related to "unbalanced quotes."