Skip to content
OpenAdvisories
Unscored USN-2440-1 1 CVE

mutt vulnerability

Published Dec 11, 2014 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

Jakub Wilk discovered that the write_one_header function in mutt
did not properly handle newline characters at the beginning of a
header. An attacker could specially craft an email to cause mutt to
crash, resulting in a denial of service.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS mutt 1.5.21-6.4ubuntu2.1

Vulnerabilities 1

  • Unscored —
    CVE-2014-9116

    The write_one_header function in mutt 1.5.23 does not properly handle newline characters at the beginning of a header, …

    mutt mutt Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2014-9116