Medium ELSA-2024-2290 2 CVEs

Moderate: mutt security update (Oracle Linux 9)

Published May 2, 2024 · Updated May 2, 2024

Ecosystem: Oracle Linux

Summary

[5:2.2.6-2]
- Fix for: CVE-2023-4874 CVE-2023-4875
- Resolves: RHEL-2812

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 9	mutt	5:2.2.6-2.el9

Vulnerabilities 2

Medium 4.3

CVE-2023-4874

Undefined Behavior for Input to API in Mutt

Null pointer dereference when viewing a specially crafted email in Mutt >1.5.2 <2.2.12

mutt mutt mutt mutt Debian Ubuntu Azure Linux

Sep 9, 2023
Low 2.2

CVE-2023-4875

Undefined Behavior for Input to API in Mutt

Null pointer dereference when composing from a specially crafted draft message in Mutt >1.5.2 <2.2.12

mutt mutt mutt mutt Debian Ubuntu Azure Linux

Sep 9, 2023