Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted e-mail message because of a hardcoded realloc size, a different vulnerability than CVE-2014-3618.

The remote NewStart CGSL host, running version MAIN 5.04, has procmail packages installed that are affected by a vulnerability:

  - A heap-based buffer overflow flaw was found in     procmail's formail utility. A remote attacker could send     a specially crafted email that, when processed by     formail, could cause formail to crash or, possibly,     execute arbitrary code as the user running formail.
    (CVE-2017-16844)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the procmail package has been released.

An update for procmail is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The procmail packages contain a mail processing tool that can be used to create mail servers, mailing lists, sort incoming mail into separate folders or files, preprocess mail, start any program upon mail arrival, or automatically forward selected incoming mail.

Security Fix(es) :

* A heap-based buffer overflow flaw was found in procmail's formail utility. A remote attacker could send a specially crafted email that, when processed by formail, could cause formail to crash or, possibly, execute arbitrary code as the user running formail. (CVE-2017-16844)

Note that Tenable Network Security has attempted to extract the preceding description block directly from the corresponding Red Hat security advisory. Virtuozzo provides no description for VZLSA advisories. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A heap-based buffer overflow flaw was found in procmail's formail utility. A remote attacker could send a specially crafted email that, when processed by formail, could cause formail to crash or, possibly, execute arbitrary code as the user running formail.(CVE-2017-16844)

This update for procmail fixes the following issues :

  - CVE-2017-16844: Heap-based buffer overflow in loadbuf     function could lead to remote denial of service     (bsc#1068648)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for procmail fixes the following issues: Security issue fixed :

  - CVE-2017-16844: Heap-based buffer overflow in the     loadbuf function in formisc.c in formail in procmail     3.22 allows remote attackers to cause a denial of     service (application crash) or possibly execute     arbitrary code via a crafted e-mail message because of a     hard-coded realloc size, a different vulnerability than     CVE-2014-3618. (bnc#1068648)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the procmail package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - The procmail packages contain a mail processing tool     that can be used to create mail servers, mailing lists,     sort incoming mail into separate folders or files,     preprocess mail, start any program upon mail arrival,     or automatically forward selected incoming     mail.(CVE-2017-16844)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security Fix(es) :

  - A heap-based buffer overflow flaw was found in     procmail's formail utility. A remote attacker could send     a specially crafted email that, when processed by     formail, could cause formail to crash or, possibly,     execute arbitrary code as the user running formail.
    (CVE-2017-16844)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2017:3269 advisory.

  - procmail: Heap-based buffer overflow in loadbuf function in formisc.c (CVE-2017-16844)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

From Red Hat Security Advisory 2017:3269 :

An update for procmail is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The procmail packages contain a mail processing tool that can be used to create mail servers, mailing lists, sort incoming mail into separate folders or files, preprocess mail, start any program upon mail arrival, or automatically forward selected incoming mail.

Security Fix(es) :

* A heap-based buffer overflow flaw was found in procmail's formail utility. A remote attacker could send a specially crafted email that, when processed by formail, could cause formail to crash or, possibly, execute arbitrary code as the user running formail. (CVE-2017-16844)

An update for procmail is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The procmail packages contain a mail processing tool that can be used to create mail servers, mailing lists, sort incoming mail into separate folders or files, preprocess mail, start any program upon mail arrival, or automatically forward selected incoming mail.

Security Fix(es) :

* A heap-based buffer overflow flaw was found in procmail's formail utility. A remote attacker could send a specially crafted email that, when processed by formail, could cause formail to crash or, possibly, execute arbitrary code as the user running formail. (CVE-2017-16844)

MITRE reports :

A remote attacker could use a flaw to cause formail to crash, resulting in a denial of service or data loss.

Jakub Wilk discovered that the formail tool incorrectly handled certain malformed mail messages. An attacker could use this flaw to cause formail to crash, resulting in a denial of service, or possibly execute arbitrary code.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Jakub Wilk reported a heap-based buffer overflow vulnerability in procmail's formail utility when processing specially crafted email headers. A remote attacker could use this flaw to cause formail to crash, resulting in a denial of service or data loss.

It was discovered that there was a heap-based buffer overflow in procmail, a tool used to sort incoming mail into various directories and filter out spam messages.

For Debian 7 'Wheezy', this issue has been fixed in procmail version 3.22-20+deb7u2.

We recommend that you upgrade your procmail packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
127148	NewStart CGSL MAIN 5.04 : procmail Vulnerability (NS-SA-2019-0005)	Nessus	NewStart CGSL Local Security Checks	critical
121773	Photon OS 2.0: Procmail PHSA-2017-0051	Nessus	PhotonOS Local Security Checks	critical
119238	Virtuozzo 7 : procmail (VZLSA-2017-3269)	Nessus	Virtuozzo Local Security Checks	critical
117608	Amazon Linux AMI : procmail (ALAS-2018-1084)	Nessus	Amazon Linux Local Security Checks	critical
106262	SUSE SLED12 / SLES12 Security Update : procmail (SUSE-SU-2018:0173-1)	Nessus	SuSE Local Security Checks	critical
105094	SUSE SLES11 Security Update : procmail (SUSE-SU-2017:3231-1)	Nessus	SuSE Local Security Checks	critical
104935	EulerOS 2.0 SP2 : procmail (EulerOS-SA-2017-1317)	Nessus	Huawei Local Security Checks	critical
104934	EulerOS 2.0 SP1 : procmail (EulerOS-SA-2017-1316)	Nessus	Huawei Local Security Checks	critical
104867	Scientific Linux Security Update : procmail on SL7.x x86_64 (20171129)	Nessus	Scientific Linux Local Security Checks	critical
104841	RHEL 7 : procmail (RHSA-2017:3269)	Nessus	Red Hat Local Security Checks	critical
104837	Oracle Linux 7 : procmail (ELSA-2017-3269)	Nessus	Oracle Linux Local Security Checks	critical
104817	CentOS 7 : procmail (CESA-2017:3269)	Nessus	CentOS Local Security Checks	critical
104731	FreeBSD : procmail -- Heap-based buffer overflow (288f7cee-ced6-11e7-8ae9-0050569f0b83)	Nessus	FreeBSD Local Security Checks	critical
104713	Ubuntu 14.04 LTS / 16.04 LTS : procmail vulnerability (USN-3483-1)	Nessus	Ubuntu Local Security Checks	critical
104685	Debian DSA-4041-1 : procmail - security update	Nessus	Debian Local Security Checks	critical
104676	Debian DLA-1173-1 : procmail security update	Nessus	Debian Local Security Checks	critical

Detections

Analytics

CVE-2017-16844

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical