MGASA-2017-0392

Source
https://advisories.mageia.org/MGASA-2017-0392.html
Import Source
https://advisories.mageia.org/MGASA-2017-0392.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2017-0392
Published
2017-10-30T19:23:17Z
Modified
2026-04-16T04:27:15.272689Z
Summary
Updated procmail packages fix security vulnerability
Details

A flaw was found in the loadbuf function in formisc.c. When the buffer is too small, the function tries to resize it, but only by Bsize (=128) bytes. This is not necessarily enough and could cause denial of service.

References
Credits

Affected packages

Mageia:5 / procmail

Package

Name
procmail
Purl
pkg:rpm/mageia/procmail?arch=source&distro=mageia-5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.22-23.1.mga5

Ecosystem specific

{
    "section": "core"
}

Database specific

source
"https://advisories.mageia.org/MGASA-2017-0392.json"

Mageia:6 / procmail

Package

Name
procmail
Purl
pkg:rpm/mageia/procmail?arch=source&distro=mageia-6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.22-24.1.mga6

Ecosystem specific

{
    "section": "core"
}

Database specific

source
"https://advisories.mageia.org/MGASA-2017-0392.json"