Red Hat Security AdvisoryRHSA-2017:3269
procmail security update
Released 2017-11-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client Optional (v. 7) procmail-3.22-36.el7_4.1
- Red Hat Enterprise Linux Server (v. 7) procmail-3.22-36.el7_4.1
- Red Hat Enterprise Linux Workstation (v. 7) procmail-3.22-36.el7_4.1
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) procmail-3.22-36.el7_4.1
Fixes 1 record
Priority MEDIUM 56
Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted e-mail…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.12196 · Published 2017-11-16 · Partial fix CWE-119
