Lucene search
Gentoo FoundationGLSA-201406-05HistoryJun 05, 2014 - 12:00 a.m.
Mutt: Arbitrary code execution
2014-06-0500:00:00
Gentoo Foundation
security.gentoo.org
12
0.039 Low
EPSS
Percentile
91.9%
Background
Mutt is a small but powerful text-based mail client.
Description
A heap-based buffer overflow has been discovered in the mutt_copy_hdr function.
Impact
A remote attacker could send a specially crafted message, possibly resulting in execution of arbitrary code with the privileges of the user running Mutt or a Denial of Service condition.
Workaround
There is no known workaround at this time.
Resolution
All Mutt users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=mail-client/mutt-1.5.22-r3"
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Gentoo | any | all | mail-client/mutt | <Β 1.5.22-r3 | UNKNOWN |
Related
nessus
nessus
Debian DLA-100-1 : mutt security update
2015-03-26 00:00:00
Fedora 20 : mutt-1.5.23-2.fc20 (2014-6408)
2014-05-19 00:00:00
GLSA-201406-05 : Mutt: Arbitrary code execution
2014-06-05 00:00:00
openvas
openvas
CentOS Update for mutt CESA-2014:0304 centos6
2014-03-20 00:00:00
CentOS Update for mutt CESA-2014:0304 centos6
2014-03-20 00:00:00
Ubuntu Update for mutt USN-2147-1
2014-03-17 00:00:00
debian
debian
[SECURITY] [DLA 100-1] mutt security update
2014-12-05 22:00:24
[SECURITY] [DSA 2874-1] mutt security update
2014-03-12 15:44:28
seebug
seebug
Mutt Mailreader 'mutt_copy_hdr()'ε ηΌε²εΊζΊ’εΊζΌζ΄
2014-03-18 00:00:00
centos
centos
mutt security update
2014-03-17 21:19:25
suse
suse
Security update for mutt (important)
2014-04-02 01:04:14
securityvulns
securityvulns
mutt buffer overflow
2014-03-13 00:00:00
[SECURITY] [DSA 2874-1] mutt security update
2014-03-13 00:00:00
prion
prion
Buffer overflow
2014-03-14 15:55:00
fedora
fedora
[SECURITY] Fedora 20 Update: mutt-1.5.23-2.fc20
2014-05-18 22:56:02
[SECURITY] Fedora 19 Update: mutt-1.5.23-2.fc19
2014-05-25 23:28:40
[SECURITY] Fedora 20 Update: mutt-1.5.23-1.fc20
2014-05-06 21:33:30
ubuntucve
ubuntucve
CVE-2014-0467
2014-03-12 00:00:00
mageia
mageia
Updated mutt package fixes security vulnerability
2014-03-31 23:30:41
slackware
slackware
[slackware-security] mutt
2014-03-13 04:17:34
debiancve
debiancve
CVE-2014-0467
2014-03-14 15:55:00
oraclelinux
oraclelinux
mutt security update
2014-03-17 00:00:00
redhat
redhat
(RHSA-2014:0304) Important: mutt security update
2014-03-17 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 08:58:37
freebsd
freebsd
mutt -- denial of service, potential remote code execution
2014-03-12 00:00:00
amazon
amazon
Important: mutt
2014-03-24 23:33:00
osv
osv
mutt - security update
2014-03-12 00:00:00
cve
cve
CVE-2014-0467
2014-03-14 15:55:00
ubuntu
ubuntu
Mutt vulnerability
2014-03-13 00:00:00