Summary
Tavis Ormandy discovered that the formail tool incorrectly handled certain
malformed mail headers. An attacker could use this flaw to cause formail to
crash, resulting in a denial of service, or possibly execute arbitrary
code.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | procmail | 3.22-21ubuntu0.1 |
Vulnerabilities 1
-
Unscored —
Heap-based buffer overflow in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of servic…
References
-
report
https://ubuntu.com/security/CVE-2014-3618