Summary
It was discovered that Mutt incorrectly handled certain email header
contents. If a user were tricked into opening a specially crafted message,
a remote attacker could possibly use this issue to cause a denial of
service. (CVE-2023-4874, CVE-2023-4875)
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | mutt | 1.13.2-1ubuntu0.6 |
| Ubuntu · 22.04 LTS 22.04:LTS | mutt | 2.1.4-1ubuntu1.2 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | mutt | 1.5.24-1ubuntu0.6+esm3 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | mutt | 1.9.4-3ubuntu0.6+esm1 |
Vulnerabilities 2
-
Medium 4.3
Undefined Behavior for Input to API in Mutt
Null pointer dereference when viewing a specially crafted email in Mutt >1.5.2 <2.2.12
-
Low 2.2
Undefined Behavior for Input to API in Mutt
Null pointer dereference when composing from a specially crafted draft message in Mutt >1.5.2 <2.2.12