The vulnerability in the imap/util.c component of the Mutt and NeoMutt email clients allows a hacker to gain unauthorized access to protected information.

The vulnerability of the imap/util.c component in Mutt and NeoMutt emails clients is related to errors in handling references to the “..” directory in the email mailbox name. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to information...

neomutt:address-fuzz: Heap-use-after-free in mutt_str_strdup

Project: https://github.com/neomutt/neomutt.git Detailed Report: https://oss-fuzz.com/testcase?key=5918370260320256 Project: neomutt Fuzzing Engine: libFuzzer Fuzz Target: address-fuzz Job Type: libfuzzerasanneomutt Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address:...

NewStart CGSL MAIN 4.05 : mutt Multiple Vulnerabilities (NS-SA-2019-0140)

The remote NewStart CGSL host, running version MAIN 4.05, has mutt packages installed that are affected by multiple vulnerabilities: - An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters...

The vulnerability of Mutt and NeoMutt email clients, related to the execution of operations outside the data buffer, allows attackers to cause service failures.

The vulnerability in the imap/message.c file of the Mutt and NeoMutt email clients relates to the execution of operations outside the data buffer boundaries. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

openSUSE Security Update : mutt (openSUSE-2019-569)

This update for mutt fixes the following issues : Security issues fixed : - bsc1101428: Mutt 1.10.1 security release update. - CVE-2018-14351: Fix imap/command.c that mishandles long IMAP status mailbox literal count size bsc1101583. - CVE-2018-14353: Fix imapquotestring in imap/util.c that has a...

The vulnerability in the code of the Mutt and NeoMutt email clients allows a hacker to gain unauthorized access to protected information.

The vulnerability in the code of the Mutt and NeoMutt email clients lies in the absence of a prohibition for “unsafe” characters such as the slash character “/” in path names to cached messages. Exploiting this vulnerability could allow an attacker to gain unauthorized access to information throu...

Remote Code Execution (RCE)

mutt is vulnerable to remote code execution RCE attacks. The vulnerability exists as an issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with...

SUSE SLED15 / SLES15 Security Update : mutt (SUSE-SU-2018:2085-1)

This update for mutt fixes the following issues: Security issues fixed : - bsc1101428: Mutt 1.10.1 security release update. - CVE-2018-14351: Fix imap/command.c that mishandles long IMAP status mailbox literal count size bsc1101583. - CVE-2018-14353: Fix imapquotestring in imap/util.c that has an...

GLSA-201810-07 : Mutt, NeoMutt: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201810-07 Mutt, NeoMutt: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Mutt, and NeoMutt. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user t...

Mutt, NeoMutt: Multiple vulnerabilities

Background Mutt is a small but very powerful text-based mail client. NeoMutt is a command line mail reader or MUA. It’s a fork of Mutt with added features. Description Multiple vulnerabilities have been discovered in Mutt, and NeoMutt. Please review the CVE identifiers referenced below for detail...

Amazon Linux 2 : mutt (ALAS-2018-1077)

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not forbid characters that may have unsafe interaction with message-cache pathnames, as demonstrated by a '/' character.CVE-2018-14362 An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-1...

Important: mutt

Issue Overview: An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not forbid characters that may have unsafe interaction with message-cache pathnames, as demonstrated by a '/' character.CVE-2018-14362 An issue was discovered in Mutt before 1.10.1 and NeoMutt...

mutt: POP body caching path traversal vulnerability

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not forbid characters that may have unsafe interaction with message-cache pathnames, as demonstrated by a '/' character...

SUSE SLED12 / SLES12 Security Update : mutt (SUSE-SU-2018:2084-1)

This update for mutt fixes the following issues: Security issues fixed : - bsc1101428: Mutt 1.10.1 security release update. - CVE-2018-14351: Fix imap/command.c that mishandles long IMAP status mailbox literal count size bsc1101583. - CVE-2018-14353: Fix imapquotestring in imap/util.c that has an...

FreeBSD : mutt/neomutt -- multiple vulnerabilities (fe12ef83-8b47-11e8-96cc-001a4a7ec6be)

NeoMutt report : DescriptionCVE-2018-14349 NO Response Heap Overflow CVE-2018-14350 INTERNALDATE Stack Overflow CVE-2018-14351 STATUS Literal Length relative write CVE-2018-14352 imapquotestring off-by-one stack overflow CVE-2018-14353 imapquotestring int underflow CVE-2018-14354 imapsubscribe...

CVE-2018-14359

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They have a buffer overflow via base64 data...

CVE-2018-14358

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer overflow for a FETCH response with a long RFC822.SIZE field...

CVE-2018-14356

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c mishandles a zero-length UID...

CVE-2018-14353

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imapquotestring in imap/util.c has an integer underflow...

CVE-2018-14352

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imapquotestring in imap/util.c does not leave room for quote characters, leading to a stack-based buffer overflow...