Linux Distros Unpatched Vulnerability : CVE-2026-43860

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mutt before 2.3.2 sometimes truncates the hashpasswd by one byte for IMAP authcram MD5 digest. CVE-2026-43860 Note that Nessus relies on the presence of the...

PT-2026-36776

Name of the Vulnerable Software and Affected Versions mutt versions prior to 2.3.2 Description An infinite loop exists in the data object to stream function within the crypt-gpgme.c file. Recommendations Update to version 2.3.2 or later...

mutt 安全漏洞

Mutt is an open-source command-line email client for sending emails from the terminal. Versions of Mutt prior to 2.3.2 had security vulnerabilities, which stemmed from occasionally truncating the hashpasswd entry by one byte in the IMAP authcram MD5 digest...

CVE-2026-43863: Incorrect Check of Function Return Value

mutt before 2.3.2 has an infinite loop in dataobjecttostream in crypt-gpgme.c...

mutt 安全漏洞

Mutt is an open-source command-line email client for sending emails from the terminal. Versions of Mutt prior to 2.3.2 contained a security vulnerability, which stemmed from an infinite loop in dataobjecttostream in crypt-gpgme.c...

mutt 代码问题漏洞

Mutt is an open-source command-line email client for sending emails from the terminal. Versions of Mutt prior to 2.3.2 had code vulnerabilities, specifically a null pointer dereferencing issue in the showsigsummary function...

PT-2026-36775

Name of the Vulnerable Software and Affected Versions mutt versions prior to 2.3.2 Description The imap auth gss security level is mishandled. Recommendations Update to version 2.3.2...

CVE-2026-43862: Access of Resource Using Incompatible Type

In mutt before 2.3.2, the imapauthgss security level is mishandled...

PT-2026-36772

Name of the Vulnerable Software and Affected Versions mutt versions prior to 2.3.2 Description The software sometimes uses the strfcpy function instead of memcpy when handling the IMAP auth cram MD5 digest. This occurs during the authentication process for IMAP servers using the CRAM-MD5 mechanis...

Linux Distros Unpatched Vulnerability : CVE-2026-43859

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mutt before 2.3.2 sometimes uses strfcpy instead of memcpy for the IMAP authcram MD5 digest. CVE-2026-43859 Note that Nessus relies on the presence of the packa...

Linux Distros Unpatched Vulnerability : CVE-2026-43861

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mutt before 2.3.2 does not check for '\0' in urlpctdecode. CVE-2026-43861 Note that Nessus relies on the presence of the package as reported by the vendor...

PT-2026-36777

Name of the Vulnerable Software and Affected Versions mutt versions prior to 2.3.2 Description A NULL pointer dereference exists in the show sig summary function. A NULL pointer dereference occurs when a program attempts to read or write to a memory location using a pointer that is null, typicall...

CVE-2026-43859: Improper Neutralization of Null Byte or NUL Character

mutt before 2.3.2 sometimes uses strfcpy instead of memcpy for the IMAP authcram MD5 digest...

mutt 安全漏洞

Mutt is an open-source command-line email client for sending emails from the terminal. Versions of Mutt prior to 2.3.2 had security vulnerabilities, which stemmed from insufficient checks in the urlpctdecode function...

Linux Distros Unpatched Vulnerability : CVE-2026-43862

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In mutt before 2.3.2, the imapauthgss security level is mishandled. CVE-2026-43862 Note that Nessus relies on the presence of the package as reported by the...

Linux Distros Unpatched Vulnerability : CVE-2026-43864

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mutt before 2.3.2 has a showsigsummary NULL pointer dereference. CVE-2026-43864 Note that Nessus relies on the presence of the package as reported by the vendor...

MiracleLinux 8 : mutt-2.0.7-3.el8 (AXSA:2024-8327:02)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2024-8327:02 advisory. mutt: null pointer dereference CVE-2023-4874 mutt: null pointer dereference CVE-2023-4875 Tenable has extracted the preceding description block...

MiracleLinux 8 : mutt-2.0.7-2.el8 (AXSA:2022-4219:01)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2022-4219:01 advisory. mutt: buffer overflow in uudecoder function CVE-2022-1328 Tenable has extracted the preceding description block directly from the MiracleLinux security...

MiracleLinux 9 : mutt-2.2.6-2.el9 (AXSA:2024-7936:01)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2024-7936:01 advisory. mutt: null pointer dereference CVE-2023-4874 mutt: null pointer dereference CVE-2023-4875 Tenable has extracted the preceding description block...

MiracleLinux 7 : mutt-1.5.21-29.el7 (AXSA:2020-4539:01)

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2020-4539:01 advisory. mutt: IMAP header caching path traversal vulnerability CVE-2018-14355 Tenable has extracted the preceding description block directly from the MiracleLinux...