Lucene search

K
vulnrichmentGitLabVULNRICHMENT:CVE-2023-4874
HistorySep 09, 2023 - 2:30 p.m.

CVE-2023-4874 Undefined Behavior for Input to API in Mutt

2023-09-0914:30:29
CWE-475
GitLab
github.com
2
cve-2023-4874
null pointer dereference
mutt
specially crafted email
api

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

AI Score

6.7

Confidence

Low

EPSS

0.001

Percentile

27.5%

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Null pointer dereference when viewing a specially crafted email in Mutt >1.5.2 <2.2.12

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

AI Score

6.7

Confidence

Low

EPSS

0.001

Percentile

27.5%

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial