CVE-2023-4874

2023-09-0915:15:34

CWE-476

CWE-475

[email protected]

web.nvd.nist.gov

103

mutt

viewer

null pointer

cve-2023-4874

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.6%

JSON

Null pointer dereference when viewing a specially crafted email in Mutt >1.5.2 <2.2.12

Affected configurations

NVD

Node

muttmuttRange1.5.2–2.2.12

Node

debiandebian_linuxMatch10.0

debiandebian_linuxMatch11.0

debiandebian_linuxMatch12.0

CPENameOperatorVersion
mutt:muttmuttlt2.2.12

CPE	Name	Operator	Version
mutt:mutt	mutt	lt	2.2.12

CNA Affected

[
  {
    "vendor": "Mutt",
    "product": "Mutt",
    "versions": [
      {
        "version": "1.5.2",
        "status": "affected",
        "lessThan": "2.2.12",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]