Summary
USN-3719-1 fixed vulnerabilities in Mutt. Unfortunately, the fixes were
not correctly applied to the packaging for Mutt in Ubuntu 16.04 LTS.
This update corrects the oversight.
We apologize for the inconvenience.
Original advisory details:
It was discovered that Mutt incorrectly handled certain requests.
An attacker could possibly use this to execute arbitrary code.
(CVE-2018-14350, CVE-2018-14352, CVE-2018-14354, CVE-2018-14359,
CVE-2018-14358, CVE-2018-14353 ,CVE-2018-14357)
It was discovered that Mutt incorrectly handled certain inputs.
An attacker could possibly use this to access or expose sensitive
information. (CVE-2018-14355, CVE-2018-14356, CVE-2018-14351,
CVE-2018-14362, CVE-2018-14349)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | mutt | 1.5.24-1ubuntu0.2 |
Vulnerabilities 12
-
Unscored —
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/command.c mishandles a NO response wi…
-
Unscored —
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer ov…
-
Unscored —
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/command.c mishandles a long IMAP stat…
-
Unscored —
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in imap/util.c does not …
-
Unscored —
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in imap/util.c has an in…
-
Unscored —
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute …
-
Unscored —
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/util.c mishandles ".." directory trav…
-
Unscored —
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c mishandles a zero-length UID.
-
Unscored —
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute …
-
Unscored —
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer ov…
-
Unscored —
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They have a buffer overflow via base64 dat…
-
Unscored —
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not forbid characters that may …
References
-
report
https://ubuntu.com/security/CVE-2018-14349
-
report
https://ubuntu.com/security/CVE-2018-14350
-
report
https://ubuntu.com/security/CVE-2018-14351
-
report
https://ubuntu.com/security/CVE-2018-14352
-
report
https://ubuntu.com/security/CVE-2018-14353
-
report
https://ubuntu.com/security/CVE-2018-14354
-
report
https://ubuntu.com/security/CVE-2018-14355
-
report
https://ubuntu.com/security/CVE-2018-14356
-
report
https://ubuntu.com/security/CVE-2018-14357
-
report
https://ubuntu.com/security/CVE-2018-14358
-
report
https://ubuntu.com/security/CVE-2018-14359
-
report
https://ubuntu.com/security/CVE-2018-14362
-
report
https://launchpad.net/bugs/1794278