Summary
It was discovered that Mutt incorrectly handled certain requests.
An attacker could possibly use this to execute arbitrary code.
(CVE-2018-14350, CVE-2018-14352, CVE-2018-14354, CVE-2018-14359,
CVE-2018-14358, CVE-2018-14353 ,CVE-2018-14357)
It was discovered that Mutt incorrectly handled certain inputs.
An attacker could possibly use this to access or expose sensitive
information. (CVE-2018-14355, CVE-2018-14356, CVE-2018-14351,
CVE-2018-14362, CVE-2018-14349)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | mutt | 1.5.21-6.4ubuntu2.2 |
| Ubuntu · 16.04 LTS 16.04:LTS | mutt | 1.5.24-1ubuntu0.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | mutt | 1.9.4-3ubuntu0.1 |
Vulnerabilities 12
-
Unscored —
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/command.c mishandles a NO response wi…
-
Unscored —
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer ov…
-
Unscored —
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/command.c mishandles a long IMAP stat…
-
Unscored —
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in imap/util.c does not …
-
Unscored —
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in imap/util.c has an in…
-
Unscored —
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute …
-
Unscored —
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/util.c mishandles ".." directory trav…
-
Unscored —
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c mishandles a zero-length UID.
-
Unscored —
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute …
-
Unscored —
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer ov…
-
Unscored —
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They have a buffer overflow via base64 dat…
-
Unscored —
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not forbid characters that may …
References
-
report
https://ubuntu.com/security/CVE-2018-14349
-
report
https://ubuntu.com/security/CVE-2018-14350
-
report
https://ubuntu.com/security/CVE-2018-14351
-
report
https://ubuntu.com/security/CVE-2018-14352
-
report
https://ubuntu.com/security/CVE-2018-14353
-
report
https://ubuntu.com/security/CVE-2018-14354
-
report
https://ubuntu.com/security/CVE-2018-14355
-
report
https://ubuntu.com/security/CVE-2018-14356
-
report
https://ubuntu.com/security/CVE-2018-14357
-
report
https://ubuntu.com/security/CVE-2018-14358
-
report
https://ubuntu.com/security/CVE-2018-14359
-
report
https://ubuntu.com/security/CVE-2018-14362