CVE-2014-3618

🗓️ 04 Sep 2014 00:00:00Reported by ubuntu.comType

Heap-based buffer overflow in formail allowing remote code execution via crafted email header

Reporter	Title	Published	Views	Family All 74
OpenVAS	CentOS Update for procmail CESA-2014:1172 centos7	11 Sep 201400:00	–	openvas
OpenVAS	Debian: Security Advisory (DLA-46-1)	8 Mar 202300:00	–	openvas
OpenVAS	Debian: Security Advisory (DSA-3019-1)	3 Sep 201400:00	–	openvas
OpenVAS	Ubuntu: Security Advisory (USN-2340-1)	5 Sep 201400:00	–	openvas
OpenVAS	CentOS Update for procmail CESA-2014:1172 centos6	11 Sep 201400:00	–	openvas
OpenVAS	Fedora Update for procmail FEDORA-2014-10357	14 Sep 201400:00	–	openvas
OpenVAS	SUSE: Security Advisory (SUSE-SU-2014:1137-1)	9 Jun 202100:00	–	openvas
OpenVAS	Debian Security Advisory DSA 3019-1 (procmail - security update)	4 Sep 201400:00	–	openvas
OpenVAS	Mageia: Security Advisory (MGASA-2014-0373)	28 Jan 202200:00	–	openvas
OpenVAS	Fedora Update for procmail FEDORA-2014-10359	1 Oct 201400:00	–	openvas

Source	Link
openwall	www.openwall.com/lists/oss-security/2014/09/03/8
ubuntu	www.ubuntu.com/security/notices/USN-2340-1
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2014-3618
launchpad	www.launchpad.net/bugs/cve/CVE-2014-3618
security-tracker	www.security-tracker.debian.org/tracker/CVE-2014-3618

OS	OS Version	Architecture	Package	Package Version	Filename
ubuntu	10.04	noarch	procmail	3.22-18ubuntu1.1	UNKNOWN
ubuntu	12.04	noarch	procmail	3.22-19ubuntu0.1	UNKNOWN
ubuntu	14.04	noarch	procmail	3.22-21ubuntu0.1	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

04 Sep 2014 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS27.5

EPSS0.108