debian/procmail vulnerabilities

Latest debian/procmail CVEs

Newest publication first

1. DSA-4041-1 procmail - security update

   Published 2017-11-19

   Unknown

2. DLA-1173-1 procmail - security update

   Published 2017-11-18

   Unknown

3. CVE-2017-16844 Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code....

   Published 2017-11-16

   Critical·CVSS 9.8 EPSS 12.2%

   Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted e-mail message because of a hardcoded realloc size, a different vu...

4. CVE-2014-3618 Heap-based buffer overflow in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted email header, related...

   Published 2014-09-08

   High·CVSS 7.5 EPSS 8.9%

   Heap-based buffer overflow in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted email header, related to "unbalanced quotes."

5. DLA-46-1 procmail - security update

   Published 2014-09-05

   Unknown

6. DSA-3019-1 procmail - security update

   Published 2014-09-04

   Unknown

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.