USN-7204-1 — neomutt vulnerabilities

Summary

Jeriko One discovered that NeoMutt incorrectly handled certain IMAP
and POP3 responses. An attacker could possibly use this issue to
cause NeoMutt to crash, resulting in a denial of service, or
the execution of arbitrary code. This issue only affected
Ubuntu 18.04 LTS. (CVE-2018-14349, CVE-2018-14350, CVE-2018-14351,
CVE-2018-14352, CVE-2018-14353, CVE-2018-14354, CVE-2018-14355,
CVE-2018-14356, CVE-2018-14357, CVE-2018-14358, CVE-2018-14359,
CVE-2018-14362)

Jeriko One discovered that NeoMutt incorrectly handled certain
NNTP-related operations. An attacker could possibly use this issue
to cause NeoMutt to crash, resulting in denial of service, or
the execution of arbitrary code. This issue only affected
Ubuntu 18.04 LTS. (CVE-2018-14360, CVE-2018-14361, CVE-2018-14363)

It was discovered that NeoMutt incorrectly processed additional data
when communicating with mail servers. An attacker could possibly use
this issue to access senstive information. This issue only affected
Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-14954, CVE-2020-28896)

It was discovered that Neomutt incorrectly handled the IMAP QRSync
setting. An attacker could possibly use this issue to cause NeoMutt
to crash, resulting in denial of service. This issue only affected
Ubuntu 20.04 LTS. (CVE-2021-32055)

Tavis Ormandy discovered that NeoMutt incorrectly parsed uuencoded
text past the length of the string. An attacker could possibly use
this issue to enable the execution of arbitrary code. This issue
only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and
Ubuntu 22.04 LTS. (CVE-2022-1328)

It was discovered that NeoMutt did not properly encrypt email headers.
An attacker could possibly use this issue to receive emails that were
not intended for them and access sensitive information. This
vulnerability was only fixed in Ubuntu 20.04 LTS, Ubuntu 22.04 LTS,
and Ubuntu 24.04 LTS. (CVE-2024-49393, CVE-2024-49394)

Fixed packages 4

Release	Package	Fixed in
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS	neomutt	20171215+dfsg.1-1ubuntu0.1~esm1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS	neomutt	20191207+dfsg.1-1.1ubuntu0.1~esm1
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS	neomutt	20211029+dfsg1-1ubuntu0.1~esm1
Ubuntu · Pro 24.04 LTS Pro:24.04:LTS	neomutt	20231103+dfsg1-1ubuntu0.1~esm1

Vulnerabilities 21

Medium 6.5

CVE-2024-49393

Mutt: neomutt: to and cc email header fields are not protected by cryptographic signing

In neomutt and mutt, the To and Cc email headers are not validated by cryptographic signing which allows an attacker that intercepts a message to change their value and include himself as a one of the recipients to compromise message confidentiality.

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu

Nov 12, 2024
Medium 5.3

CVE-2024-49394

Mutt: neomutt: in-reply-to email header field it not protected by cryptograpic signing

In mutt and neomutt the In-Reply-To email header field is not protected by cryptographic signing which allows an attacker to reuse an unencrypted but signed email message to impersonate the original sender.

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu

Nov 12, 2024
Medium 4.3

CVE-2022-1328

Buffer Overflow in uudecoder in Mutt affecting all versions starting from 0.94.13 before 2.2.3 allows read past end of …

mutt mutt mutt mutt Debian Ubuntu Alpine

Apr 14, 2022
Unscored —

CVE-2018-14349

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/command.c mishandles a NO response wi…

mutt mutt neomutt neomutt Debian Ubuntu Alpine

Jul 17, 2018
Unscored —

CVE-2018-14350

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer ov…

mutt mutt neomutt neomutt Debian Ubuntu Alpine

Jul 17, 2018
Unscored —

CVE-2018-14351

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/command.c mishandles a long IMAP stat…

mutt mutt neomutt neomutt Debian Ubuntu Alpine

Jul 17, 2018
Unscored —

CVE-2018-14352

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in imap/util.c does not …

mutt mutt neomutt neomutt Debian Ubuntu Alpine

Jul 17, 2018
Unscored —

CVE-2018-14353

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in imap/util.c has an in…

mutt mutt neomutt neomutt Debian Ubuntu Alpine

Jul 17, 2018
Unscored —

CVE-2018-14354

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute …

mutt mutt neomutt neomutt Debian Ubuntu Alpine

Jul 17, 2018
Unscored —

CVE-2018-14355

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/util.c mishandles ".." directory trav…

mutt mutt neomutt neomutt Debian Ubuntu Alpine

Jul 17, 2018
Unscored —

CVE-2018-14356

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c mishandles a zero-length UID.

mutt mutt neomutt neomutt Debian Ubuntu Alpine

Jul 17, 2018
Unscored —

CVE-2018-14357

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute …

mutt mutt neomutt neomutt Debian Ubuntu Alpine

Jul 17, 2018
Unscored —

CVE-2018-14358

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer ov…

mutt mutt neomutt neomutt Debian Ubuntu Alpine

Jul 17, 2018
Unscored —

CVE-2018-14359

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They have a buffer overflow via base64 dat…

mutt mutt neomutt neomutt Debian Ubuntu Alpine

Jul 17, 2018
Unscored —

CVE-2018-14360

An issue was discovered in NeoMutt before 2018-07-16. nntp_add_group in newsrc.c has a stack-based buffer overflow beca…

mutt neomutt neomutt Debian Ubuntu

Jul 17, 2018
Unscored —

CVE-2018-14361

An issue was discovered in NeoMutt before 2018-07-16. nntp.c proceeds even if memory allocation fails for messages data.

mutt neomutt neomutt Debian Ubuntu

Jul 17, 2018
Unscored —

CVE-2018-14362

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not forbid characters that may …

mutt mutt neomutt neomutt Debian Ubuntu Alpine

Jul 17, 2018
Unscored —

CVE-2018-14363

An issue was discovered in NeoMutt before 2018-07-16. newsrc.c does not properly restrict '/' characters that may have …

mutt neomutt neomutt Debian Ubuntu

Jul 17, 2018
Unscored —

CVE-2020-14954

Mutt before 1.14.4 and NeoMutt before 2020-06-19 have a STARTTLS buffering issue that affects IMAP, SMTP, and POP3. Whe…

mutt mutt neomutt neomutt Debian Ubuntu

Jun 21, 2020
Unscored —

CVE-2020-28896

Mutt before 2.0.2 and NeoMutt before 2020-11-20 did not ensure that $ssl_force_tls was processed if an IMAP server's in…

mutt mutt neomutt neomutt Debian Ubuntu Alpine

Nov 23, 2020
Unscored —

CVE-2021-32055

Mutt 1.11.0 through 2.0.x before 2.0.7 (and NeoMutt 2019-10-25 through 2021-05-04) has a $imap_qresync issue in which i…

mutt mutt neomutt neomutt Debian Ubuntu Alpine

May 5, 2021

References

report
https://ubuntu.com/security/CVE-2018-14349
report
https://ubuntu.com/security/CVE-2018-14350
report
https://ubuntu.com/security/CVE-2018-14351
report
https://ubuntu.com/security/CVE-2018-14352
report
https://ubuntu.com/security/CVE-2018-14353
report
https://ubuntu.com/security/CVE-2018-14354
report
https://ubuntu.com/security/CVE-2018-14355
report
https://ubuntu.com/security/CVE-2018-14356
report
https://ubuntu.com/security/CVE-2018-14357
report
https://ubuntu.com/security/CVE-2018-14358
report
https://ubuntu.com/security/CVE-2018-14359
report
https://ubuntu.com/security/CVE-2018-14360
report
https://ubuntu.com/security/CVE-2018-14361
report
https://ubuntu.com/security/CVE-2018-14362
report
https://ubuntu.com/security/CVE-2018-14363
report
https://ubuntu.com/security/CVE-2020-14954
report
https://ubuntu.com/security/CVE-2020-28896
report
https://ubuntu.com/security/CVE-2021-32055
report
https://ubuntu.com/security/CVE-2022-1328
report
https://ubuntu.com/security/CVE-2024-49393
report
https://ubuntu.com/security/CVE-2024-49394

neomutt vulnerabilities

Summary

Fixed packages 4

Vulnerabilities 21

Mutt: neomutt: to and cc email header fields are not protected by cryptographic signing

Mutt: neomutt: in-reply-to email header field it not protected by cryptograpic signing

Buffer Overflow in uudecoder in Mutt affecting all versions starting from 0.94.13 before 2.2.3 allows read past end of …

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/command.c mishandles a NO response wi…

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer ov…

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/command.c mishandles a long IMAP stat…

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in imap/util.c does not …

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in imap/util.c has an in…

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute …

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/util.c mishandles ".." directory trav…

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c mishandles a zero-length UID.

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute …

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer ov…

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They have a buffer overflow via base64 dat…

An issue was discovered in NeoMutt before 2018-07-16. nntp_add_group in newsrc.c has a stack-based buffer overflow beca…

An issue was discovered in NeoMutt before 2018-07-16. nntp.c proceeds even if memory allocation fails for messages data.

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not forbid characters that may …

An issue was discovered in NeoMutt before 2018-07-16. newsrc.c does not properly restrict '/' characters that may have …

Mutt before 1.14.4 and NeoMutt before 2020-06-19 have a STARTTLS buffering issue that affects IMAP, SMTP, and POP3. Whe…

Mutt before 2.0.2 and NeoMutt before 2020-11-20 did not ensure that $ssl_force_tls was processed if an IMAP server's in…

Mutt 1.11.0 through 2.0.x before 2.0.7 (and NeoMutt 2019-10-25 through 2021-05-04) has a $imap_qresync issue in which i…

References