CVE-2017-16844
CriticalSummary
A heap-based buffer overflow in the loadbuf function in formisc.c in procmail 3.22 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted e-mail message.
Risk Assessment
The organization may experience service outages or unauthorized access to systems, potentially leading to data loss or security breaches.
Recommendation
It is recommended to update procmail to the latest version to mitigate this vulnerability and to monitor email traffic for potential attacks.
Original NVD description (English source)
Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted e-mail message because of a hardcoded realloc size, a different vulnerability than CVE-2014-3618.