Mutt vulnerability

2014-12-1100:00:00

ubuntu.com

9.3 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.015 Low

EPSS

Percentile

87.0%

JSON

Releases

Ubuntu 14.10
Ubuntu 14.04 ESM
Ubuntu 12.04
Ubuntu 10.04

Packages

mutt - text-based mailreader supporting MIME, GPG, PGP and threading

Details

Jakub Wilk discovered that the write_one_header function in mutt
did not properly handle newline characters at the beginning of a
header. An attacker could specially craft an email to cause mutt to
crash, resulting in a denial of service.

OSVersionArchitecturePackageVersionFilename
Ubuntu14.10noarchmutt< 1.5.23-1.1ubuntu0.2UNKNOWN
Ubuntu14.10noarchmutt-dbg< 1.5.23-1.1ubuntu0.2UNKNOWN
Ubuntu14.10noarchmutt-patched< 1.5.23-1.1ubuntu0.2UNKNOWN
Ubuntu14.04noarchmutt< 1.5.21-6.4ubuntu2.1UNKNOWN
Ubuntu14.04noarchmutt-dbg< 1.5.21-6.4ubuntu2.1UNKNOWN
Ubuntu14.04noarchmutt-patched< 1.5.21-6.4ubuntu2.1UNKNOWN
Ubuntu12.04noarchmutt< 1.5.21-5ubuntu2.2UNKNOWN
Ubuntu12.04noarchmutt-dbg< 1.5.21-5ubuntu2.2UNKNOWN
Ubuntu12.04noarchmutt-patched< 1.5.21-5ubuntu2.2UNKNOWN
Ubuntu10.04noarchmutt< 1.5.20-7ubuntu1.3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	14.10	noarch	mutt	< 1.5.23-1.1ubuntu0.2	UNKNOWN
Ubuntu	14.10	noarch	mutt-dbg	< 1.5.23-1.1ubuntu0.2	UNKNOWN
Ubuntu	14.10	noarch	mutt-patched	< 1.5.23-1.1ubuntu0.2	UNKNOWN
Ubuntu	14.04	noarch	mutt	< 1.5.21-6.4ubuntu2.1	UNKNOWN
Ubuntu	14.04	noarch	mutt-dbg	< 1.5.21-6.4ubuntu2.1	UNKNOWN
Ubuntu	14.04	noarch	mutt-patched	< 1.5.21-6.4ubuntu2.1	UNKNOWN
Ubuntu	12.04	noarch	mutt	< 1.5.21-5ubuntu2.2	UNKNOWN
Ubuntu	12.04	noarch	mutt-dbg	< 1.5.21-5ubuntu2.2	UNKNOWN
Ubuntu	12.04	noarch	mutt-patched	< 1.5.21-5ubuntu2.2	UNKNOWN
Ubuntu	10.04	noarch	mutt	< 1.5.20-7ubuntu1.3	UNKNOWN