Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 53

Export CSV
CVE-2018-14362

mutt: POP body caching path traversal vulnerability

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not forbid characters that may have unsafe interaction with message-cache pathnames, as demonstrated by a '/' character.

CVSS 3.1 · 9.8 Critical EPSS 3.7% KEV · Not listed
Vendors
Canonical Debian Mutt and 2 more
Products
Ubuntu Linux Debian Linux Mutt and 8 more
CVE-2018-14358

mutt: stack-based buffer overflow in imap/message.c

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer overflow for a FETCH response with a long RFC822.SIZE field.

CVSS 3.1 · 9.8 Critical EPSS 3.9% KEV · Not listed
Vendors
Canonical Debian Mutt and 1 more
Products
Ubuntu Linux Debian Linux Mutt and 1 more
CVE-2018-14357

mutt: Remote Code Execution via backquote characters

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with an automatic subscription.

CVSS 3.1 · 9.8 Critical EPSS 5.0% KEV · Not listed
Vendors
Canonical Debian Mutt and 2 more
Products
Ubuntu Linux Debian Linux Mutt and 8 more
CVE-2018-14355

mutt: IMAP header caching path traversal vulnerability

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/util.c mishandles ".." directory traversal in a mailbox name.

CVSS 3.1 · 5.3 Medium EPSS 3.2% KEV · Not listed
Vendors
Canonical Debian Mutt and 2 more
Products
Ubuntu Linux Debian Linux Mutt and 2 more
CVE-2018-14354

mutt: Remote code injection vulnerability to an IMAP mailbox

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with a manual subscription or unsubscription.

CVSS 3.1 · 9.8 Critical EPSS 6.2% KEV · Not listed
Vendors
Canonical Debian Mutt and 2 more
Products
Ubuntu Linux Debian Linux Mutt and 8 more
CVE-2018-14353

mutt: integer underflow in imap/util.c

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in imap/util.c has an integer underflow.

CVSS 3.1 · 9.8 Critical EPSS 3.7% KEV · Not listed
Vendors
Canonical Debian Mutt and 1 more
Products
Ubuntu Linux Debian Linux Mutt and 1 more
CVE-2018-14352

mutt: stack-based buffer overflow in imap/util.c

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in imap/util.c does not leave room for quote characters, leading to a stack-based buffer overflow.

CVSS 3.1 · 9.8 Critical EPSS 4.0% KEV · Not listed
Vendors
Canonical Debian Mutt and 1 more
Products
Ubuntu Linux Debian Linux Mutt and 1 more
CVE-2018-14351

mutt: IMAP status mailbox literal mishandled in imap/command.c

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/command.c mishandles a long IMAP status mailbox literal count size.

CVSS 3.1 · 9.8 Critical EPSS 3.2% KEV · Not listed
Vendors
Canonical Debian Mutt and 1 more
Products
Ubuntu Linux Debian Linux Mutt and 1 more
CVE-2018-14350

mutt: stack-based buffer overflow in imap/message.c

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer overflow for a FETCH response with a long INTERNALDATE field.

CVSS 3.1 · 9.8 Critical EPSS 5.0% KEV · Not listed
Vendors
Canonical Debian Mutt and 1 more
Products
Ubuntu Linux Debian Linux Mutt and 1 more
CVE-2018-14349

mutt: Heap Overflow in imap/command.c

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/command.c mishandles a NO response without a message.

CVSS 3.1 · 9.8 Critical EPSS 3.2% KEV · Not listed
Vendors
Canonical Debian Mutt and 1 more
Products
Ubuntu Linux Debian Linux Mutt and 1 more
CVE-2005-2351

mutt: denial of service via a series of requests to temporary files

Mutt before 1.5.20 patch 7 allows an attacker to cause a denial of service via a series of requests to mutt temporary files.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Debian Mutt
Products
Debian Linux Mutt