Lucene search

K
archlinuxArch LinuxASA-201503-6
HistoryMar 09, 2015 - 12:00 a.m.

mutt: denial of service

2015-03-0900:00:00
Arch Linux
lists.archlinux.org
16

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.015 Low

EPSS

Percentile

85.6%

The write_one_header function does not properly handle newline
characters at the beginning of a header, which allows remote attackers
to cause a denial of service (crash) via a header with an empty body,
which triggers a heap-based buffer overflow in the mutt_substrdup function.

OSVersionArchitecturePackageVersionFilename
anyanyanymutt< 1.5.23-2UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.015 Low

EPSS

Percentile

85.6%