Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted e-mail message because of a hardcoded realloc size, a different vulnerability than CVE-2014-3618.

An update of the procmail package has been released.

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2017-2423:02 advisory.

    * A heap-based buffer overflow flaw was found in procmail's formail utility. A remote attacker could send     a specially crafted email that, when processed by formail, could cause formail to crash or, possibly,     execute arbitrary code as the user running formail. (CVE-2017-16844)     CVE-2017-16844     Heap-based buffer overflow in the loadbuf function in formisc.c in     formail in procmail 3.22 allows remote attackers to cause a denial of     service (application crash) or possibly execute arbitrary code via a     crafted e-mail message because of a hardcoded realloc size, a different     vulnerability than CVE-2014-3618.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote     attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a     crafted e-mail message because of a hardcoded realloc size, a different vulnerability than CVE-2014-3618.
    (CVE-2017-16844)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of procmail installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2017-16844 advisory.

  - Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote     attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a     crafted e-mail message because of a hardcoded realloc size, a different vulnerability than CVE-2014-3618.
    (CVE-2017-16844)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 5.04, has procmail packages installed that are affected by a vulnerability:

  - A heap-based buffer overflow flaw was found in     procmail's formail utility. A remote attacker could send     a specially crafted email that, when processed by     formail, could cause formail to crash or, possibly,     execute arbitrary code as the user running formail.
    (CVE-2017-16844)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update for procmail is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The procmail packages contain a mail processing tool that can be used to create mail servers, mailing lists, sort incoming mail into separate folders or files, preprocess mail, start any program upon mail arrival, or automatically forward selected incoming mail.

Security Fix(es) :

* A heap-based buffer overflow flaw was found in procmail's formail utility. A remote attacker could send a specially crafted email that, when processed by formail, could cause formail to crash or, possibly, execute arbitrary code as the user running formail. (CVE-2017-16844)

Note that Tenable Network Security has attempted to extract the preceding description block directly from the corresponding Red Hat security advisory. Virtuozzo provides no description for VZLSA advisories. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A heap-based buffer overflow flaw was found in procmail's formail utility. A remote attacker could send a specially crafted email that, when processed by formail, could cause formail to crash or, possibly, execute arbitrary code as the user running formail.(CVE-2017-16844)

This update for procmail fixes the following issues :

  - CVE-2017-16844: Heap-based buffer overflow in loadbuf     function could lead to remote denial of service     (bsc#1068648)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for procmail fixes the following issues: Security issue fixed :

  - CVE-2017-16844: Heap-based buffer overflow in the     loadbuf function in formisc.c in formail in procmail     3.22 allows remote attackers to cause a denial of     service (application crash) or possibly execute     arbitrary code via a crafted e-mail message because of a     hard-coded realloc size, a different vulnerability than     CVE-2014-3618. (bnc#1068648)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the procmail package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - The procmail packages contain a mail processing tool     that can be used to create mail servers, mailing lists,     sort incoming mail into separate folders or files,     preprocess mail, start any program upon mail arrival,     or automatically forward selected incoming     mail.(CVE-2017-16844)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security Fix(es) :

  - A heap-based buffer overflow flaw was found in     procmail's formail utility. A remote attacker could send     a specially crafted email that, when processed by     formail, could cause formail to crash or, possibly,     execute arbitrary code as the user running formail.
    (CVE-2017-16844)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2017:3269 advisory.

    The procmail packages contain a mail processing tool that can be used to create mail servers, mailing     lists, sort incoming mail into separate folders or files, preprocess mail, start any program upon mail     arrival, or automatically forward selected incoming mail.

    Security Fix(es):

    * A heap-based buffer overflow flaw was found in procmail's formail utility. A remote attacker could send     a specially crafted email that, when processed by formail, could cause formail to crash or, possibly,     execute arbitrary code as the user running formail. (CVE-2017-16844)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2017-3269 advisory.

    [3.22-36.1]
    - Fixed possible buffer overflow in loadbuf function       Resolves: CVE-2017-16844

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update for procmail is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The procmail packages contain a mail processing tool that can be used to create mail servers, mailing lists, sort incoming mail into separate folders or files, preprocess mail, start any program upon mail arrival, or automatically forward selected incoming mail.

Security Fix(es) :

* A heap-based buffer overflow flaw was found in procmail's formail utility. A remote attacker could send a specially crafted email that, when processed by formail, could cause formail to crash or, possibly, execute arbitrary code as the user running formail. (CVE-2017-16844)

MITRE reports :

A remote attacker could use a flaw to cause formail to crash, resulting in a denial of service or data loss.

The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-3483-1 advisory.

    Jakub Wilk discovered that the formail tool incorrectly handled certain malformed mail messages. An     attacker could use this flaw to cause formail to crash, resulting in a denial of service, or possibly     execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Jakub Wilk reported a heap-based buffer overflow vulnerability in procmail's formail utility when processing specially crafted email headers. A remote attacker could use this flaw to cause formail to crash, resulting in a denial of service or data loss.

It was discovered that there was a heap-based buffer overflow in procmail, a tool used to sort incoming mail into various directories and filter out spam messages.

For Debian 7 'Wheezy', this issue has been fixed in procmail version 3.22-20+deb7u2.

We recommend that you upgrade your procmail packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Type	Severity
334090	Photon OS 5.0: Procmail PHSA-2024-5.0-91-0430	Nessus	PhotonOS Local Security Checks	Local	critical
289521	MiracleLinux 7 : procmail-3.22-36.el7.1 (AXSA:2017-2423:02)	Nessus	Miracle Linux Local Security Checks	Local	critical
233764	Photon OS 5.0: Procmail PHSA-2024-5.0-0430	Nessus	PhotonOS Local Security Checks	Local	critical
220851	Linux Distros Unpatched Vulnerability : CVE-2017-16844	Nessus	Misc.	Local	critical
202800	Photon OS 1.0: Procmail PHSA-2017-0052	Nessus	PhotonOS Local Security Checks	Local	critical
201574	CBL Mariner 2.0 Security Update: procmail (CVE-2017-16844)	Nessus	MarinerOS Local Security Checks	Local	critical
127148	NewStart CGSL MAIN 5.04 : procmail Vulnerability (NS-SA-2019-0005)	Nessus	NewStart CGSL Local Security Checks	Local	critical
121773	Photon OS 2.0: Procmail PHSA-2017-0051	Nessus	PhotonOS Local Security Checks	Local	critical
119238	Virtuozzo 7 : procmail (VZLSA-2017-3269)	Nessus	Virtuozzo Local Security Checks	Local	critical
117608	Amazon Linux AMI : procmail (ALAS-2018-1084)	Nessus	Amazon Linux Local Security Checks	Local	critical
106262	SUSE SLED12 / SLES12 Security Update : procmail (SUSE-SU-2018:0173-1)	Nessus	SuSE Local Security Checks	Local	critical
105094	SUSE SLES11 Security Update : procmail (SUSE-SU-2017:3231-1)	Nessus	SuSE Local Security Checks	Local	critical
104935	EulerOS 2.0 SP2 : procmail (EulerOS-SA-2017-1317)	Nessus	Huawei Local Security Checks	Local	critical
104934	EulerOS 2.0 SP1 : procmail (EulerOS-SA-2017-1316)	Nessus	Huawei Local Security Checks	Local	critical
104867	Scientific Linux Security Update : procmail on SL7.x x86_64 (20171129)	Nessus	Scientific Linux Local Security Checks	Local	critical
104841	RHEL 7 : procmail (RHSA-2017:3269)	Nessus	Red Hat Local Security Checks	Local	critical
104837	Oracle Linux 7 : procmail (ELSA-2017-3269)	Nessus	Oracle Linux Local Security Checks	Local	critical
104817	CentOS 7 : procmail (CESA-2017:3269)	Nessus	CentOS Local Security Checks	Local	critical
104731	FreeBSD : procmail -- Heap-based buffer overflow (288f7cee-ced6-11e7-8ae9-0050569f0b83)	Nessus	FreeBSD Local Security Checks	Local	critical
104713	Ubuntu 14.04 LTS / 16.04 LTS : procmail vulnerability (USN-3483-1)	Nessus	Ubuntu Local Security Checks	Local	critical
104685	Debian DSA-4041-1 : procmail - security update	Nessus	Debian Local Security Checks	Local	critical
104676	Debian DLA-1173-1 : procmail security update	Nessus	Debian Local Security Checks	Local	critical

Detections

Analytics

CVE-2017-16844

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical