DeutschShown in its original language — a full translation is planned for a future version.
mutt: Mehrere Schwachstellen
view advisory published 2026-05-03
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in mutt ausnutzen, um Sicherheitsvorkehrungen zu umgehen und um einen Denial-of-Service-Zustand herbeizuführen.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-43864US | — | — | ||
mutt before 2.3.2 has a show_sig_summary NULL pointer dereference. | ||||
| CVE-2026-43863US | — | — | ||
mutt before 2.3.2 has an infinite loop in data_object_to_stream in crypt-gpgme.c. | ||||
| CVE-2026-43862US | — | — | ||
In mutt before 2.3.2, the imap_auth_gss security level is mishandled. | ||||
| CVE-2026-43861US | — | — | ||
mutt before 2.3.2 does not check for '\0' in url_pct_decode. | ||||
| CVE-2026-43860US | — | — | ||
mutt before 2.3.2 sometimes truncates the hash_passwd by one byte for IMAP auth_cram MD5 digest. | ||||
| CVE-2026-43859US | — | — | ||
mutt before 2.3.2 sometimes uses strfcpy instead of memcpy for the IMAP auth_cram MD5 digest. | ||||
02
references
External citations — patches, advisories, analysis.
- openSUSE Security Update OPENSUSE-SU-2026:10695-1 vom 2026-05-07external
- SUSE Security Update SUSE-SU-2026:22340-1 vom 2026-07-01external
- SUSE Security Update SUSE-SU-2026:2301-1 vom 2026-06-08external
- SUSE Security Update SUSE-SU-2026:2300-1 vom 2026-06-08external
- WID-SEC-W-2026-1343 - CSAF Versionself
- WID-SEC-2026-1343 - Portal Versionself
- CVERecord vom 2026-05-03external
- CVERecord vom 2026-05-03external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan