Re: CVE request: procmail heap overflow in getlline()

[Tero Marttila <terom () fixme fi>]

FWIW I don't have a specific PoC/scenario to supply for this case that 
serves as an exploit with untrusted input, but I am not familar enough 
with procmail and how it is used to make a judgement on if some related 
code-path/scenario could be exploitable.

I reported this as a security bug due to the implied high risk level of 
procmail being suid-root on Debian, and thus deserving of more detailed 
inspection. But that's a distribution issue.

 -- Tero Marttila

On 04/12/14 01:30, Joshua J. Drake wrote:
> Is it possible to trigger this issue with untrusted input or only
> trusted input from procmailrc?
>
> Joshua
>
> On Wed, Dec 03, 2014 at 11:31:20PM +0200, Henri Salo wrote:
> > Please assign 2014 CVE for procmail heap overflow in getlline() as described in
> > following Debian BTS item <https://bugs.debian.org/771958> reported by Tero
> > Marttila. Please comment if you need more information about the issue.
> >
> > ---
> > Henri Salo