Skip to main content

Procmail

2 CVEs product

Monthly

CVE-2017-16844 Nov 16, 15:29 CRITICAL Act Now

Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Epss exploitation probability 20.2% and no vendor patch available.

RCE Buffer Overflow Denial Of Service Procmail
NVD
CVSS 3.0
9.8
EPSS
20.2%
CVE-2014-3618 Sep 08, 14:55 HIGH POC This Week

Heap-based buffer overflow in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted email header,. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Denial Of Service Canonical Ubuntu Linux +1
NVD
CVSS 2.0
7.5
EPSS
9.8%
EPSS 20% CVSS 9.8
CRITICAL Act Now

Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Epss exploitation probability 20.2% and no vendor patch available.

RCE Buffer Overflow Denial Of Service +1
NVD
EPSS 10% CVSS 7.5
HIGH POC This Week

Heap-based buffer overflow in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted email header,. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Denial Of Service +3
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy