{"id":"CVE-2017-16844","aliases":["AZL-36982","AZL-6803","AZL-7332","DEBIAN-CVE-2017-16844","DLA-1173-1","DSA-4041-1","EUVD-2017-8018","GHSA-4f62-c8fw-44pp","RHSA-2017:3269","SUSE-SU-2017:3231-1","SUSE-SU-2018:0173-1","UBUNTU-CVE-2017-16844","USN-3483-1","openSUSE-SU-2024:11194-1"],"status":"published","title":"Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22...","description":"Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted e-mail message because of a hardcoded realloc size, a different vulnerability than CVE-2014-3618.","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.12196,"percentile":0.96195,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2017-11-16T00:00:00Z","modified":"2026-09-01T20:03:45Z","fixes":[{"ecosystem":"Azure Linux:3","package":"procmail","fixed_in":["3.22-53"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"procmail","fixed_in":["3.22-53"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"procmail","fixed_in":["3.22-26"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"procmail","fixed_in":["3.22-26"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"procmail","fixed_in":["3.22-26"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"procmail","fixed_in":["3.22-20+deb7u2"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"procmail","fixed_in":["3.22-24+deb8u1"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"procmail","fixed_in":["3.22-25+deb9u1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"procmail","fixed_in":["0:3.22-36.el7_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"procmail-debuginfo","fixed_in":["0:3.22-36.el7_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"procmail","fixed_in":["0:3.22-36.el7_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"procmail-debuginfo","fixed_in":["0:3.22-36.el7_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"procmail","fixed_in":["0:3.22-36.el7_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"procmail-debuginfo","fixed_in":["0:3.22-36.el7_4.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"procmail","fixed_in":["3.22-240.8.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"procmail","fixed_in":["3.22-240.8.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"procmail","fixed_in":["3.22-269.3.5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"procmail","fixed_in":["3.22-269.3.5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"procmail","fixed_in":["3.22-269.3.5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"procmail","fixed_in":["3.22-269.3.5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"procmail","fixed_in":["3.22-269.3.5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"procmail","fixed_in":["3.22-269.3.5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"procmail","fixed_in":["3.22-269.3.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"procmail","fixed_in":["3.22-21ubuntu0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"procmail","fixed_in":["3.22-25ubuntu0.16.04.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"procmail","fixed_in":["3.22-277.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"procmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22-53"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"procmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22-53"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"procmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22-53"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"procmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22-26"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"procmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22-26"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"procmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22-26"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"procmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22-20+deb7u2"}]}],"versions":["3.22-20","3.22-20+deb7u1"]},{"source":"osv","ecosystem":"Debian:8","package":"procmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22-24+deb8u1"}]}],"versions":["3.22-24"]},{"source":"osv","ecosystem":"Debian:9","package":"procmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22-25+deb9u1"}]}],"versions":["3.22-25"]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"procmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.22-36.el7_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"procmail-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.22-36.el7_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"procmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.22-36.el7_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"procmail-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.22-36.el7_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"procmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.22-36.el7_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"procmail-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.22-36.el7_4.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"procmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22-240.8.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"procmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22-240.8.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"procmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22-269.3.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"procmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22-269.3.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"procmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22-269.3.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"procmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22-269.3.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"procmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22-269.3.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"procmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22-269.3.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"procmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22-269.3.5"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"procmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22-21ubuntu0.2"}]}],"versions":["3.22-20","3.22-21","3.22-21ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"procmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22-25ubuntu0.16.04.1"}]}],"versions":["3.22-25"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"procmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22-21ubuntu0.2"}]}],"versions":["3.22-20","3.22-21","3.22-21ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"procmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22-25ubuntu0.16.04.1"}]}],"versions":["3.22-25"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"procmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22-277.3"}]}]}],"products":[{"vendor":"procmail","product":"procmail"}],"references":[{"url":"https://lists.debian.org/debian-lts-announce/2017/11/msg00019.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://access.redhat.com/errata/RHSA-2017:3269","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=876511","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://www.debian.org/security/2017/dsa-4041","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securitytracker.com/id/1039844","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-16844","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-4f62-c8fw-44pp"},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-16844","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1500070","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_3269.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-16844","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-16844","tags":["advisory","report"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20173231-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1068648","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16844","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180173-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-16844","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3483-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3483-2","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2017-16844","description":"Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted e-mail message because of a hardcoded realloc size, a different vulnerability than CVE-2014-3618.","status":"published","published":"2017-11-16T15:00:00Z","modified":"2024-08-05T20:35:21.217Z","updated_at":"2026-11-02T14:33:21.453505Z"}],"euvd":[{"id":"EUVD-2017-8018","description":"Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted e-mail message because of a hardcoded realloc size, a different vulnerability than CVE-2014-3618.","status":"published","published":"2017-11-16T15:00:00Z","modified":"2024-08-05T20:35:21Z","updated_at":"2026-11-03T02:23:11.533108Z"}],"ghsa":[{"id":"GHSA-4f62-c8fw-44pp","title":"Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22...","description":"Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted e-mail message because of a hardcoded realloc size, a different vulnerability than CVE-2014-3618.","status":"published","published":"2022-05-14T03:46:33Z","modified":"2023-02-03T05:00:33Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:52:49.021794Z"}],"nvd":[{"id":"CVE-2017-16844","description":"Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted e-mail message because of a hardcoded realloc size, a different vulnerability than CVE-2014-3618.","status":"published","published":"2017-11-16T15:29:00.51Z","modified":"2026-06-17T01:10:00.653Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:04:08.635428Z"}],"osv":[{"id":"AZL-36982","title":"CVE-2017-16844 affecting package procmail for versions less than 3.22-53","description":"Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted e-mail message because of a hardcoded realloc size, a different vulnerability than CVE-2014-3618.","status":"published","published":"2017-11-16T15:29:00Z","modified":"2026-04-21T04:33:47.89711Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:04.173658Z"},{"id":"AZL-6803","title":"CVE-2017-16844 affecting package procmail for versions less than 3.22-53","description":"Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted e-mail message because of a hardcoded realloc size, a different vulnerability than CVE-2014-3618.","status":"published","published":"2017-11-16T15:29:00Z","modified":"2026-04-21T04:38:19.094004Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:08.630357Z"},{"id":"AZL-7332","title":"CVE-2017-16844 affecting package procmail for versions less than 3.22-53","description":"Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted e-mail message because of a hardcoded realloc size, a different vulnerability than CVE-2014-3618.","status":"published","published":"2017-11-16T15:29:00Z","modified":"2026-04-21T04:33:51.6804Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:09.201912Z"},{"id":"CVE-2017-16844","description":"Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted e-mail message because of a hardcoded realloc size, a different vulnerability than CVE-2014-3618.","status":"published","published":"2017-11-16T15:29:00.51Z","modified":"2026-03-15T22:15:27.694281Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:04.853379Z"},{"id":"DEBIAN-CVE-2017-16844","description":"Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted e-mail message because of a hardcoded realloc size, a different vulnerability than CVE-2014-3618.","status":"published","published":"2017-11-16T15:29:00.51Z","modified":"2026-09-01T20:03:45.119217019Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:28.801885Z"},{"id":"RHSA-2017:3269","title":"Red Hat Security Advisory: procmail security update","status":"published","published":"2024-09-16T00:52:36Z","modified":"2026-06-26T10:35:59Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"UBUNTU-CVE-2017-16844","description":"Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted e-mail message because of a hardcoded realloc size, a different vulnerability than CVE-2014-3618.","status":"published","published":"2017-11-16T00:00:00Z","modified":"2026-02-04T03:19:23.988696Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:14.563448Z"},{"id":"DLA-1173-1","title":"procmail - security update","status":"published","published":"2017-11-18T00:00:00Z","modified":"2026-03-09T01:00:54.971012Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"DSA-4041-1","title":"procmail - security update","status":"published","published":"2017-11-19T00:00:00Z","modified":"2026-03-09T01:20:42.38865Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"openSUSE-SU-2024:11194-1","title":"procmail-3.22-277.3 on GA media","description":"These are all security issues fixed in the procmail-3.22-277.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:02:22.997773Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2017:3231-1","title":"Security update for procmail","description":"This update for procmail fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2017-16844: Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted e-mail message because of a hardcoded realloc size, a different vulnerability than CVE-2014-3618. (bnc#1068648)\n","status":"published","published":"2017-12-07T14:27:27Z","modified":"2026-02-04T03:10:35.212113Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"SUSE-SU-2018:0173-1","title":"Security update for procmail","description":"This update for procmail fixes the following issues:\n\n- CVE-2017-16844: Heap-based buffer overflow in loadbuf function could lead to remote denial of service (bsc#1068648)\n  \n","status":"published","published":"2018-01-22T12:38:00Z","modified":"2026-02-04T02:30:40.77609Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"USN-3483-1","title":"procmail vulnerability","description":"Jakub Wilk discovered that the formail tool incorrectly handled certain\nmalformed mail messages. An attacker could use this flaw to cause formail\nto crash, resulting in a denial of service, or possibly execute arbitrary\ncode.\n","status":"published","published":"2017-11-20T18:00:31Z","modified":"2026-02-10T04:41:14Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}