Vulnerabilities > CVE-2017-16844 - Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Procmail 3.22
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted e-mail message because of a hardcoded realloc size, a different vulnerability than CVE-2014-3618.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
Common Weakness Enumeration (CWE)
Common Attack Pattern Enumeration and Classification (CAPEC)
- Buffer Overflow via Environment Variables This attack pattern involves causing a buffer overflow through manipulation of environment variables. Once the attacker finds that they can modify an environment variable, they may try to overflow associated buffers. This attack leverages implicit trust often placed in environment variables.
- Overflow Buffers Buffer Overflow attacks target improper or missing bounds checking on buffer operations, typically triggered by input injected by an attacker. As a consequence, an attacker is able to write past the boundaries of allocated buffer regions in memory, causing a program crash or potentially redirection of execution as per the attackers' choice.
- Client-side Injection-induced Buffer Overflow This type of attack exploits a buffer overflow vulnerability in targeted client software through injection of malicious content from a custom-built hostile service.
- Filter Failure through Buffer Overflow In this attack, the idea is to cause an active filter to fail by causing an oversized transaction. An attacker may try to feed overly long input strings to the program in an attempt to overwhelm the filter (by causing a buffer overflow) and hoping that the filter does not fail securely (i.e. the user input is let into the system unfiltered).
- MIME Conversion An attacker exploits a weakness in the MIME conversion routine to cause a buffer overflow and gain control over the mail server machine. The MIME system is designed to allow various different information formats to be interpreted and sent via e-mail. Attack points exist when data are converted to MIME compatible format and back.
Nessus
NASL family Ubuntu Local Security Checks NASL id UBUNTU_USN-3483-1.NASL description Jakub Wilk discovered that the formail tool incorrectly handled certain malformed mail messages. An attacker could use this flaw to cause formail to crash, resulting in a denial of service, or possibly execute arbitrary code. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. last seen 2020-06-01 modified 2020-06-02 plugin id 104713 published 2017-11-21 reporter Ubuntu Security Notice (C) 2017-2019 Canonical, Inc. / NASL script (C) 2017-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/104713 title Ubuntu 14.04 LTS / 16.04 LTS / 17.04 / 17.10 : procmail vulnerability (USN-3483-1) NASL family Huawei Local Security Checks NASL id EULEROS_SA-2017-1317.NASL description According to the version of the procmail package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The procmail packages contain a mail processing tool that can be used to create mail servers, mailing lists, sort incoming mail into separate folders or files, preprocess mail, start any program upon mail arrival, or automatically forward selected incoming mail.(CVE-2017-16844) Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. last seen 2020-05-06 modified 2017-12-01 plugin id 104935 published 2017-12-01 reporter This script is Copyright (C) 2017-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/104935 title EulerOS 2.0 SP2 : procmail (EulerOS-SA-2017-1317) NASL family PhotonOS Local Security Checks NASL id PHOTONOS_PHSA-2017-0051_PYTHON2.NASL description An update of the python2 package has been released. last seen 2020-03-17 modified 2019-02-07 plugin id 121774 published 2019-02-07 reporter This script is Copyright (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/121774 title Photon OS 2.0: Python2 PHSA-2017-0051 NASL family CentOS Local Security Checks NASL id CENTOS_RHSA-2017-3269.NASL description An update for procmail is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. The procmail packages contain a mail processing tool that can be used to create mail servers, mailing lists, sort incoming mail into separate folders or files, preprocess mail, start any program upon mail arrival, or automatically forward selected incoming mail. Security Fix(es) : * A heap-based buffer overflow flaw was found in procmail last seen 2020-06-01 modified 2020-06-02 plugin id 104817 published 2017-11-29 reporter This script is Copyright (C) 2017-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/104817 title CentOS 7 : procmail (CESA-2017:3269) NASL family PhotonOS Local Security Checks NASL id PHOTONOS_PHSA-2017-0052.NASL description An update of [rsync,python2,procmail,libvirt,linux,mongodb,openssh,binutils,glibc] packages for photonOS has been released. last seen 2019-02-21 modified 2019-02-07 plugin id 111901 published 2018-08-17 reporter Tenable source https://www.tenable.com/plugins/index.php?view=single&id=111901 title Photon OS 1.0: Binutils / Glibc / Linux / Mongodb / Openssh / Procmail / Python2 / Rsync PHSA-2017-0052 (deprecated) NASL family NewStart CGSL Local Security Checks NASL id NEWSTART_CGSL_NS-SA-2019-0005_PROCMAIL.NASL description The remote NewStart CGSL host, running version MAIN 5.04, has procmail packages installed that are affected by a vulnerability: - A heap-based buffer overflow flaw was found in procmail last seen 2020-06-01 modified 2020-06-02 plugin id 127148 published 2019-08-12 reporter This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/127148 title NewStart CGSL MAIN 5.04 : procmail Vulnerability (NS-SA-2019-0005) NASL family FreeBSD Local Security Checks NASL id FREEBSD_PKG_288F7CEECED611E78AE90050569F0B83.NASL description MITRE reports : A remote attacker could use a flaw to cause formail to crash, resulting in a denial of service or data loss. last seen 2020-06-01 modified 2020-06-02 plugin id 104731 published 2017-11-22 reporter This script is Copyright (C) 2017-2018 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/104731 title FreeBSD : procmail -- Heap-based buffer overflow (288f7cee-ced6-11e7-8ae9-0050569f0b83) NASL family Virtuozzo Local Security Checks NASL id VIRTUOZZO_VZLSA-2017-3269.NASL description An update for procmail is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. The procmail packages contain a mail processing tool that can be used to create mail servers, mailing lists, sort incoming mail into separate folders or files, preprocess mail, start any program upon mail arrival, or automatically forward selected incoming mail. Security Fix(es) : * A heap-based buffer overflow flaw was found in procmail last seen 2020-06-01 modified 2020-06-02 plugin id 119238 published 2018-11-27 reporter This script is Copyright (C) 2018 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/119238 title Virtuozzo 7 : procmail (VZLSA-2017-3269) NASL family Huawei Local Security Checks NASL id EULEROS_SA-2017-1316.NASL description According to the version of the procmail package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The procmail packages contain a mail processing tool that can be used to create mail servers, mailing lists, sort incoming mail into separate folders or files, preprocess mail, start any program upon mail arrival, or automatically forward selected incoming mail.(CVE-2017-16844) Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. last seen 2020-05-06 modified 2017-12-01 plugin id 104934 published 2017-12-01 reporter This script is Copyright (C) 2017-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/104934 title EulerOS 2.0 SP1 : procmail (EulerOS-SA-2017-1316) NASL family PhotonOS Local Security Checks NASL id PHOTONOS_PHSA-2017-0051_RSYNC.NASL description An update of the rsync package has been released. last seen 2020-03-17 modified 2019-02-07 plugin id 121775 published 2019-02-07 reporter This script is Copyright (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/121775 title Photon OS 2.0: Rsync PHSA-2017-0051 NASL family SuSE Local Security Checks NASL id SUSE_SU-2017-3231-1.NASL description This update for procmail fixes the following issues: Security issue fixed : - CVE-2017-16844: Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted e-mail message because of a hard-coded realloc size, a different vulnerability than CVE-2014-3618. (bnc#1068648) Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. last seen 2020-06-01 modified 2020-06-02 plugin id 105094 published 2017-12-08 reporter This script is Copyright (C) 2017-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/105094 title SUSE SLES11 Security Update : procmail (SUSE-SU-2017:3231-1) NASL family Oracle Linux Local Security Checks NASL id ORACLELINUX_ELSA-2017-3269.NASL description From Red Hat Security Advisory 2017:3269 : An update for procmail is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. The procmail packages contain a mail processing tool that can be used to create mail servers, mailing lists, sort incoming mail into separate folders or files, preprocess mail, start any program upon mail arrival, or automatically forward selected incoming mail. Security Fix(es) : * A heap-based buffer overflow flaw was found in procmail last seen 2020-06-01 modified 2020-06-02 plugin id 104837 published 2017-11-29 reporter This script is Copyright (C) 2017-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/104837 title Oracle Linux 7 : procmail (ELSA-2017-3269) NASL family Scientific Linux Local Security Checks NASL id SL_20171129_PROCMAIL_ON_SL7_X.NASL description Security Fix(es) : - A heap-based buffer overflow flaw was found in procmail last seen 2020-03-18 modified 2017-11-30 plugin id 104867 published 2017-11-30 reporter This script is Copyright (C) 2017-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/104867 title Scientific Linux Security Update : procmail on SL7.x x86_64 (20171129) NASL family PhotonOS Local Security Checks NASL id PHOTONOS_PHSA-2017-0051_LINUX.NASL description An update of the linux package has been released. last seen 2020-03-17 modified 2019-02-07 plugin id 121771 published 2019-02-07 reporter This script is Copyright (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/121771 title Photon OS 2.0: Linux PHSA-2017-0051 NASL family PhotonOS Local Security Checks NASL id PHOTONOS_PHSA-2017-0051_OPENSSH.NASL description An update of the openssh package has been released. last seen 2020-03-17 modified 2019-02-07 plugin id 121772 published 2019-02-07 reporter This script is Copyright (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/121772 title Photon OS 2.0: Openssh PHSA-2017-0051 NASL family PhotonOS Local Security Checks NASL id PHOTONOS_PHSA-2017-0051.NASL description An update of [rsync,linux,openssh,procmail,python2,libvirt] packages for PhotonOS has been released. last seen 2019-02-21 modified 2019-02-07 plugin id 111900 published 2018-08-17 reporter Tenable source https://www.tenable.com/plugins/index.php?view=single&id=111900 title Photon OS 2.0: Libvirt / Linux / Openssh / Procmail / Python2 / Rsync PHSA-2017-0051 (deprecated) NASL family Red Hat Local Security Checks NASL id REDHAT-RHSA-2017-3269.NASL description An update for procmail is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. The procmail packages contain a mail processing tool that can be used to create mail servers, mailing lists, sort incoming mail into separate folders or files, preprocess mail, start any program upon mail arrival, or automatically forward selected incoming mail. Security Fix(es) : * A heap-based buffer overflow flaw was found in procmail last seen 2020-06-01 modified 2020-06-02 plugin id 104841 published 2017-11-29 reporter This script is Copyright (C) 2017-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/104841 title RHEL 7 : procmail (RHSA-2017:3269) NASL family SuSE Local Security Checks NASL id SUSE_SU-2018-0173-1.NASL description This update for procmail fixes the following issues : - CVE-2017-16844: Heap-based buffer overflow in loadbuf function could lead to remote denial of service (bsc#1068648) Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. last seen 2020-06-01 modified 2020-06-02 plugin id 106262 published 2018-01-23 reporter This script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/106262 title SUSE SLED12 / SLES12 Security Update : procmail (SUSE-SU-2018:0173-1) NASL family Amazon Linux Local Security Checks NASL id ALA_ALAS-2018-1084.NASL description A heap-based buffer overflow flaw was found in procmail last seen 2020-06-01 modified 2020-06-02 plugin id 117608 published 2018-09-20 reporter This script is Copyright (C) 2018 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/117608 title Amazon Linux AMI : procmail (ALAS-2018-1084) NASL family Debian Local Security Checks NASL id DEBIAN_DSA-4041.NASL description Jakub Wilk reported a heap-based buffer overflow vulnerability in procmail last seen 2020-06-01 modified 2020-06-02 plugin id 104685 published 2017-11-20 reporter This script is Copyright (C) 2017-2018 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/104685 title Debian DSA-4041-1 : procmail - security update NASL family PhotonOS Local Security Checks NASL id PHOTONOS_PHSA-2017-0051_PROCMAIL.NASL description An update of the procmail package has been released. last seen 2020-03-17 modified 2019-02-07 plugin id 121773 published 2019-02-07 reporter This script is Copyright (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/121773 title Photon OS 2.0: Procmail PHSA-2017-0051 NASL family Debian Local Security Checks NASL id DEBIAN_DLA-1173.NASL description It was discovered that there was a heap-based buffer overflow in procmail, a tool used to sort incoming mail into various directories and filter out spam messages. For Debian 7 last seen 2020-03-17 modified 2017-11-20 plugin id 104676 published 2017-11-20 reporter This script is Copyright (C) 2017-2020 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/104676 title Debian DLA-1173-1 : procmail security update
Redhat
| advisories |
| ||||||||||||||||||||||||||||||||||||||
| rpms |
|
References
- http://www.securitytracker.com/id/1039844
- http://www.securitytracker.com/id/1039844
- https://access.redhat.com/errata/RHSA-2017:3269
- https://access.redhat.com/errata/RHSA-2017:3269
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=876511
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=876511
- https://lists.debian.org/debian-lts-announce/2017/11/msg00019.html
- https://lists.debian.org/debian-lts-announce/2017/11/msg00019.html
- https://www.debian.org/security/2017/dsa-4041
- https://www.debian.org/security/2017/dsa-4041