Lucene search
+L

Mutt 1.11.0 through 2.0.x before 2.0.7 (and NeoMutt 2019-10-25 through 2021-05-04) has a $imap_qresync issue in which imap/util.c has an out-of-bounds read in situations where an IMAP sequence set ends with a comma. NOTE: the $imap_qresync setting for QRESYNC is not enabled by default.

🗓️ 19 Jan 2022 08:00:00Reported by MicrosoftType 
mscve
 mscve
🔗 msrc.microsoft.com👁 9 Views

Out-of-bounds read in qresync for Mutt and NeoMutt when a sequence ends with a comma.

Related
Detection
ReporterTitlePublishedViews
Family
attackerkb
attackerkb
CVE-2021-32055
5 May 202116:15
–attackerkb
alpinelinux
AlpineLinux
CVE-2021-32055
5 May 202115:06
–alpinelinux
altlinux
ALT Linux
Security fix for the ALT Linux 9 package neomutt version 20210205-alt2
6 Jul 202100:00
–altlinux
bdu_fstec
BDU FSTEC
Mutt/NeoMutt Buffer Overflow DoS
20 Sep 202100:00
–bdu_fstec
cbl_mariner
CBLMariner
CVE-2021-32055 affecting package mutt for versions less than 2.0.5-4
9 Dec 202201:44
–cbl_mariner
cnnvd
CNNVD
Mutt buffer error vulnerability
5 May 202100:00
–cnnvd
cve
CVE
CVE-2021-32055
5 May 202115:06
–cve
cvelist
Cvelist
CVE-2021-32055
5 May 202115:06
–cvelist
debiancve
Debian CVE
CVE-2021-32055
5 May 202115:06
–debiancve
euvd
EUVD
EUVD-2021-18918
7 Oct 202500:30
–euvd
Rows per page
Vulners

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

19 Jan 2022 08:00Current
8.2High risk
Vulners AI Score8.2
CVSS 25.8
CVSS 3.19.1
EPSS0.02551
9