DeutschShown in its original language — a full translation is planned for a future version.
mutt: Mehrere Schwachstellen
view advisory published 2018-07-29
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in mutt ausnutzen, um beliebigen Programmcode mit Benutzerrechten auszuführen, Angriffe mit nicht näher spezifizierten Auswirkungen oder einen Denial of Service Angriff durchzuführen.
01
describes (15)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-14363US | high7.5 | — | ||
An issue was discovered in NeoMutt before 2018-07-16. newsrc.c does not properly restrict '/' characters that may have unsafe interaction with cache pathnames. | ||||
| CVE-2018-14362US | critical9.8 | — | ||
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not forbid characters that may have unsafe interaction with message-cache pathnames, as demo… | ||||
| CVE-2018-14361US | critical9.8 | — | ||
An issue was discovered in NeoMutt before 2018-07-16. nntp.c proceeds even if memory allocation fails for messages data. | ||||
| CVE-2018-14360US | critical9.8 | — | ||
An issue was discovered in NeoMutt before 2018-07-16. nntp_add_group in newsrc.c has a stack-based buffer overflow because of incorrect sscanf usage. | ||||
| CVE-2018-14359US | critical9.8 | — | ||
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They have a buffer overflow via base64 data. | ||||
| CVE-2018-14358US | critical9.8 | — | ||
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer overflow for a FETCH response with a long RFC822.SIZE field. | ||||
| CVE-2018-14357US | critical9.8 | — | ||
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the m… | ||||
| CVE-2018-14356US | critical9.8 | — | ||
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c mishandles a zero-length UID. | ||||
| CVE-2018-14355US | medium5.3 | — | ||
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/util.c mishandles ".." directory traversal in a mailbox name. | ||||
| CVE-2018-14354US | critical9.8 | — | ||
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the m… | ||||
| CVE-2018-14353US | critical9.8 | — | ||
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in imap/util.c has an integer underflow. | ||||
| CVE-2018-14352US | critical9.8 | — | ||
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in imap/util.c does not leave room for quote characters, leading to a stack-based buf… | ||||
| CVE-2018-14351US | critical9.8 | — | ||
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/command.c mishandles a long IMAP status mailbox literal count size. | ||||
| CVE-2018-14350US | critical9.8 | — | ||
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer overflow for a FETCH response with a long INTERNALDATE field. | ||||
| CVE-2018-14349US | critical9.8 | — | ||
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/command.c mishandles a NO response without a message. | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2018-2526 vom 2018-08-20external
- Red Hat Security Advisory RHSA-2018:2526 vom 2018-08-20external
- Red Hat Security Advisory RHSA-2020:1126 vom 2020-03-31external
- Ubuntu Security Notice USN-7204-1 vom 2025-01-15external
- WID-SEC-W-2025-0102 - CSAF Versionself
- WID-SEC-2025-0102 - Portal Versionself
- Debian Security Advisory DSA-4277 vom 2018-08-18external
- SUSE Security Update SUSE-SU-2018:2084-1 vom 2018-07-29external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan