Stay Secure with the Latest Linux Advisories

security advisorydenial of servicedebian

Debian: DSA-3019-1 Critical: Heap Overflow In Procmail Formail Utility

Boris 'pi' Piwinger and Tavis Ormandy reported a heap overflow vulnerability in procmail's formail utility when processing specially-crafted email headers. A remote attacker could use this flaw to cause formail to crash, resulting in a denial of service or data . - ------------------------------------------------------------------------- Debian Security Advisory DSA-3019-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Salvatore Bonaccorso September 04, 2014 http://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : procmail CVE ID : CVE-2014-3618 Debian Bug : 704675 760443 Boris 'pi' Piwinger and Tavis Ormandy reported a heap overflow vulnerability in procmail's formail utility when processing specially-crafted email headers. A remote attacker could use this flaw to cause formail to crash, resulting in a denial of service or data loss, or possibly execute arbitrary code. For the stable distribution (wheezy), this problem has been fixed in version 3.22-20+deb7u1. For the unstable distribution (sid), this problem has been fixed in version 3.22-22. We recommend that you upgrade your procmail packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Investigate the heap overflow vulnerability present in procmail's formail tool, which may result in service unavailability or potential data corruption.. Procmail Security Update, Heap Overflow Risk, Debian Advisory. . Severity: Critical. LinuxSecurity.com Team

Sep 04, 2014 •Critical Debian