Debian Procmail vulnerabilities

CVE-2017-16844 [HIGH] CVE-2017-16844: procmail - Heap-based buffer overflow in the loadbuf function in formisc.c in formail in pr... Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted e-mail message because of a hardcoded realloc size, a different vulnerability than CVE-2014-3618. Scope: local bookworm: resolved (fixed in 3.22-26) bull

CVE-2014-3618 [HIGH] CVE-2014-3618: procmail - Heap-based buffer overflow in formisc.c in formail in procmail 3.22 allows remot... Heap-based buffer overflow in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted email header, related to "unbalanced quotes." Scope: local bookworm: resolved (fixed in 3.22-22) bullseye: resolved (fixed in 3.22-22) forky: resolved (fixed in 3.22-22) sid: resolved (fixed