Lucene search
UbuntuUSN-6374-1HistorySep 14, 2023 - 12:00 a.m.
Mutt vulnerabilities
2023-09-1400:00:00
ubuntu.com
25
ubuntu 23.04
ubuntu 22.04
ubuntu 20.04
ubuntu 18.04
ubuntu 16.04
denial of service
email header
mime
gpg
pgp
remote attack
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
AI Score
6.3
Confidence
High
EPSS
0.001
Percentile
27.5%
Releases
- Ubuntu 23.04
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 ESM
- Ubuntu 16.04 ESM
Packages
- mutt - text-based mailreader supporting MIME, GPG, PGP and threading
Details
It was discovered that Mutt incorrectly handled certain email header
contents. If a user were tricked into opening a specially crafted message,
a remote attacker could possibly use this issue to cause a denial of
service. (CVE-2023-4874, CVE-2023-4875)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 23.04 | noarch | mutt | < 2.2.9-1ubuntu0.23.04.1 | UNKNOWN |
| Ubuntu | 23.04 | noarch | mutt-dbgsym | < 2.2.9-1ubuntu0.23.04.1 | UNKNOWN |
| Ubuntu | 22.04 | noarch | mutt | < 2.1.4-1ubuntu1.2 | UNKNOWN |
| Ubuntu | 22.04 | noarch | mutt-dbgsym | < 2.1.4-1ubuntu1.2 | UNKNOWN |
| Ubuntu | 20.04 | noarch | mutt | < 1.13.2-1ubuntu0.6 | UNKNOWN |
| Ubuntu | 20.04 | noarch | mutt-dbgsym | < 1.13.2-1ubuntu0.6 | UNKNOWN |
| Ubuntu | 18.04 | noarch | mutt | < 1.9.4-3ubuntu0.6+esm1 | UNKNOWN |
| Ubuntu | 18.04 | noarch | mutt | < 1.9.4-3ubuntu0.6 | UNKNOWN |
| Ubuntu | 18.04 | noarch | mutt-dbgsym | < 1.9.4-3ubuntu0.6 | UNKNOWN |
| Ubuntu | 16.04 | noarch | mutt | < 1.5.24-1ubuntu0.6+esm3 | UNKNOWN |
Related
nessus
nessus
Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 : Mutt vulnerabilities (USN-6374-1)
2023-09-14 00:00:00
EulerOS 2.0 SP11 : mutt (EulerOS-SA-2023-3280)
2024-01-16 00:00:00
CentOS 8 : mutt (CESA-2024:3058)
2024-05-22 00:00:00
amazon
amazon
Medium: mutt
2023-09-27 22:48:00
Medium: mutt
2023-09-27 22:15:00
openvas
openvas
Huawei EulerOS: Security Advisory for mutt (EulerOS-SA-2023-3252)
2023-12-12 00:00:00
Huawei EulerOS: Security Advisory for mutt (EulerOS-SA-2023-3222)
2023-11-10 00:00:00
Debian: Security Advisory (DLA-3574-1)
2023-09-21 00:00:00
mageia
mageia
Updated mutt packages fix security vulnerabilities
2024-05-13 17:23:47
debian
debian
[SECURITY] [DLA 3574-1] mutt security update
2023-09-20 17:40:21
[SECURITY] [DSA 5494-1] mutt security update
2023-09-10 18:52:02
almalinux
almalinux
Moderate: mutt security update
2024-04-30 00:00:00
Moderate: mutt security update
2024-05-22 00:00:00
oraclelinux
oraclelinux
mutt security update
2024-05-02 00:00:00
mutt security update
2024-05-23 00:00:00
redhat
redhat
(RHSA-2024:2290) Moderate: mutt security update
2024-04-30 06:15:17
(RHSA-2024:3058) Moderate: mutt security update
2024-05-22 06:35:29
ubuntu
ubuntu
Mutt vulnerabilities
2023-10-19 00:00:00
redos
redos
ROS-20240521-01
2024-05-21 00:00:00
osv
osv
Moderate: mutt security update
2024-06-14 13:59:30
mutt - security update
2023-09-20 00:00:00
mutt vulnerabilities
2023-10-19 16:51:06
rocky
rocky
mutt security update
2024-06-14 13:59:30
debiancve
debiancve
CVE-2023-4875
2023-09-09 15:15:35
CVE-2023-4874
2023-09-09 15:15:34
prion
prion
Null pointer dereference
2023-09-09 15:15:00
Null pointer dereference
2023-09-09 15:15:00
cvelist
cvelist
CVE-2023-4875 Undefined Behavior for Input to API in Mutt
2023-09-09 14:30:24
CVE-2023-4874 Undefined Behavior for Input to API in Mutt
2023-09-09 14:30:29
cbl_mariner
cbl_mariner
CVE-2023-4874 affecting package mutt for versions less than 2.2.12-1
2023-09-28 11:57:58
CVE-2023-4875 affecting package mutt for versions less than 2.2.12-1
2023-09-28 11:57:58
redhatcve
redhatcve
CVE-2023-4875
2023-09-12 12:24:41
CVE-2023-4874
2023-09-12 12:24:36
ubuntucve
ubuntucve
CVE-2023-4875
2023-09-09 00:00:00
CVE-2023-4874
2023-09-09 00:00:00
nvd
nvd
CVE-2023-4875
2023-09-09 15:15:35
CVE-2023-4874
2023-09-09 15:15:34
cve
cve
CVE-2023-4874
2023-09-09 15:15:34
CVE-2023-4875
2023-09-09 15:15:35
vulnrichment
vulnrichment
CVE-2023-4874 Undefined Behavior for Input to API in Mutt
2023-09-09 14:30:29
CVE-2023-4875 Undefined Behavior for Input to API in Mutt
2023-09-09 14:30:24
veracode
veracode
Denial Of Service (DoS)
2023-10-09 15:52:11
Denial Of Service (DoS)
2023-10-09 15:52:07
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
AI Score
6.3
Confidence
High
EPSS
0.001
Percentile
27.5%
Related for USN-6374-1