Medium ELSA-2024-3058 2 CVEs

Moderate: mutt security update (Oracle Linux 8)

Published May 23, 2024 · Updated May 23, 2024

Ecosystem: Oracle Linux

Summary

[5:2.0.7-3]
- Fix for: CVE-2023-4874 CVE-2023-4875
- Resolves: RHEL-2811

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 8	mutt	5:2.0.7-3.el8

Vulnerabilities 2

Medium 4.3

CVE-2023-4874

Undefined Behavior for Input to API in Mutt

Null pointer dereference when viewing a specially crafted email in Mutt >1.5.2 <2.2.12

mutt mutt mutt mutt Debian Ubuntu Azure Linux

Sep 9, 2023
Low 2.2

CVE-2023-4875

Undefined Behavior for Input to API in Mutt

Null pointer dereference when composing from a specially crafted draft message in Mutt >1.5.2 <2.2.12

mutt mutt mutt mutt Debian Ubuntu Azure Linux

Sep 9, 2023