Lucene search
Gentoo FoundationGLSA-201701-04HistoryJan 01, 2017 - 12:00 a.m.
Mutt: Heap-based buffer overflow
2017-01-0100:00:00
Gentoo Foundation
security.gentoo.org
13
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.014 Low
EPSS
Percentile
86.5%
Background
Mutt is a small but very powerful text-based mail client.
Description
A heap-based buffer overflow was discovered in Mutt’s mutt_substrdup function.
Impact
A remote attacker could cause a Denial of Service condition.
Workaround
There is no known workaround at this time.
Resolution
All Mutt users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=mail-client/mutt-1.5.23-r5"
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Gentoo | any | all | mail-client/mutt | < 1.5.23-r5 | UNKNOWN |
Related
nessus
nessus
Mandriva Linux Security Advisory : mutt (MDVSA-2014:245)
2014-12-15 00:00:00
Mandriva Linux Security Advisory : mutt (MDVSA-2015:078)
2015-03-30 00:00:00
openSUSE Security Update : mutt (openSUSE-SU-2014:1635-1)
2014-12-16 00:00:00
slackware
slackware
[slackware-security] mutt
2015-04-22 01:21:37
debian
debian
[SECURITY] [DSA 3083-1] mutt security update
2014-11-30 13:47:51
[SECURITY] [DSA 3083-1] mutt security update
2014-11-30 13:47:51
securityvulns
securityvulns
mutt DoS
2014-12-01 00:00:00
[SECURITY] [DSA 3083-1] mutt security update
2014-12-01 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2014-0509)
2022-01-28 00:00:00
Slackware: Security Advisory (SSA:2015-111-07)
2022-04-21 00:00:00
Ubuntu: Security Advisory (USN-2440-1)
2022-08-26 00:00:00
ubuntucve
ubuntucve
CVE-2014-9116
2014-12-02 00:00:00
suse
suse
Security update for mutt (important)
2015-01-06 18:04:47
Security update for mutt (important)
2019-01-17 00:00:00
Security update for mutt (important)
2018-08-06 15:13:42
cvelist
cvelist
CVE-2014-9116
2014-12-02 16:00:00
nvd
nvd
CVE-2014-9116
2014-12-02 16:59:08
cve
cve
CVE-2014-9116
2014-12-02 16:59:08
prion
prion
Heap overflow
2014-12-02 16:59:00
fedora
fedora
[SECURITY] Fedora 21 Update: mutt-1.5.23-7.fc21
2015-02-15 03:02:04
[SECURITY] Fedora 20 Update: mutt-1.5.23-4.fc20
2015-02-15 02:57:04
osv
osv
mutt - security update
2014-11-30 00:00:00
mutt - security update
2014-12-05 00:00:00
mageia
mageia
Updated mutt packages fix CVE-2014-9116
2014-12-05 18:54:13
archlinux
archlinux
mutt: denial of service
2015-03-09 00:00:00
freebsd
freebsd
mutt -- denial of service via crafted mail message
2014-11-26 00:00:00
ubuntu
ubuntu
Mutt vulnerability
2014-12-11 00:00:00
debiancve
debiancve
CVE-2014-9116
2014-12-02 16:59:08
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.014 Low
EPSS
Percentile
86.5%
Related for GLSA-201701-04