Red Hat Security AdvisoryRHSA-2014:1172
procmail security update
Released 2014-09-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) procmail-3.22-17.1.2, procmail-3.22-17.1.2.i386, procmail-3.22-17.1.2.ia64 +1
- Red Hat Enterprise Linux Client Optional (v. 7) procmail-3.22-34.el7_0.1
- Red Hat Enterprise Linux Desktop (v. 5 client) procmail-3.22-17.1.2, procmail-3.22-17.1.2.i386
- Red Hat Enterprise Linux Desktop (v. 6) procmail-3.22-25.1.el6_5.1
- Red Hat Enterprise Linux HPC Node (v. 6) procmail-3.22-25.1.el6_5.1
- Red Hat Enterprise Linux Server (v. 6) procmail-3.22-25.1.el6_5.1
- Red Hat Enterprise Linux Server (v. 7) procmail-3.22-34.el7_0.1
- Red Hat Enterprise Linux Workstation (v. 6) procmail-3.22-25.1.el6_5.1
- Red Hat Enterprise Linux Workstation (v. 7) procmail-3.22-34.el7_0.1
Fixes 1 record
Priority MEDIUM 44
Heap-based buffer overflow in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted email header, related to "unbalanced quot…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.08865 · Published 2014-09-08 · Fixed CWE-119
