mutt security vulnerabilities

Mutt is an open-source command-line email client for sending emails from the terminal. Versions of Mutt prior to 2.3.2 contained a security vulnerability, which stemmed from an infinite loop in dataobjecttostream in crypt-gpgme.c...

mutt security vulnerabilities

Mutt is an open-source command-line email client for sending emails from the terminal. Versions of Mutt prior to 2.3.2 had security vulnerabilities, which stemmed from insufficient checks in the urlpctdecode function...

Mutt code issue vulnerabilities

Mutt is an open-source command-line email client for sending emails from the terminal. Versions of Mutt prior to 2.3.2 had code vulnerabilities, specifically a null pointer dereferencing issue in the showsigsummary function...

mutt security vulnerabilities

Mutt is an open-source command-line email client for sending emails from the terminal. Versions of Mutt prior to 2.3.2 had security vulnerabilities, which stemmed from sometimes using strfcpy instead of memcpy for the IMAP authcram MD5 digest...

Linux Distros Unpatched Vulnerability : CVE-2026-43859

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mutt before 2.3.2 sometimes uses strfcpy instead of memcpy for the IMAP authcram MD5 digest. CVE-2026-43859 Note that Nessus relies on the presence of the packa...

Linux Distros Unpatched Vulnerability : CVE-2026-43861

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mutt before 2.3.2 does not check for '\0' in urlpctdecode. CVE-2026-43861 Note that Nessus relies on the presence of the package as reported by the vendor...

Linux Distros Unpatched Vulnerability : CVE-2026-43860

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mutt before 2.3.2 sometimes truncates the hashpasswd by one byte for IMAP authcram MD5 digest. CVE-2026-43860 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2026-43864

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mutt before 2.3.2 has a showsigsummary NULL pointer dereference. CVE-2026-43864 Note that Nessus relies on the presence of the package as reported by the vendor...

mutt security vulnerabilities

Mutt is an open-source command-line email client for sending emails from the terminal. Versions of Mutt prior to 2.3.2 had security vulnerabilities, which stemmed from occasionally truncating the hashpasswd entry by one byte in the IMAP authcram MD5 digest...

CVE-2026-43864: NULL Pointer Dereference

mutt before 2.3.2 has a showsigsummary NULL pointer dereference...

CVE-2026-43862: Access of Resource Using Incompatible Type

In mutt before 2.3.2, the imapauthgss security level is mishandled...

CVE-2026-43861: Improper Neutralization of Null Byte or NUL Character

mutt before 2.3.2 does not check for '\0' in urlpctdecode...

CVE-2026-43860: Off-by-one Error

mutt before 2.3.2 sometimes truncates the hashpasswd by one byte for IMAP authcram MD5 digest...

CVE-2026-43859: Improper Neutralization of Null Byte or NUL Character

mutt before 2.3.2 sometimes uses strfcpy instead of memcpy for the IMAP authcram MD5 digest...

Linux Distros Unpatched Vulnerability : CVE-2026-43862

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In mutt before 2.3.2, the imapauthgss security level is mishandled. CVE-2026-43862 Note that Nessus relies on the presence of the package as reported by the...

Linux Distros Unpatched Vulnerability : CVE-2026-43863

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mutt before 2.3.2 has an infinite loop in dataobjecttostream in crypt-gpgme.c. CVE-2026-43863 Note that Nessus relies on the presence of the package as reported...

CVE-2026-43863: Incorrect Check of Function Return Value

mutt before 2.3.2 has an infinite loop in dataobjecttostream in crypt-gpgme.c...

MiracleLinux 7 : mutt-1.5.21-29.el7 (AXSA:2020-4539:01)

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2020-4539:01 advisory. mutt: IMAP header caching path traversal vulnerability CVE-2018-14355 Tenable has extracted the preceding description block directly from the MiracleLinux...

MiracleLinux 8 : mutt-2.0.7-1.el8 (AXSA:2021-2863:01)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2021-2863:01 advisory. mutt: Incorrect handling of invalid initial IMAP responses could lead to an authentication attempt over unencrypted connection CVE-2020-28896 mutt:...

MiracleLinux 8 : mutt-2.0.7-2.el8 (AXSA:2022-4219:01)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2022-4219:01 advisory. mutt: buffer overflow in uudecoder function CVE-2022-1328 Tenable has extracted the preceding description block directly from the MiracleLinux security...