Description
Stack-based buffer overflow in the browse_get_namespace function in imap/browse.c of Mutt 1.4.2.1 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via long namespaces received from the IMAP server.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | mutt | 1.5.11+cvs20060403-2 | — |
| Debian 13 | mutt | 1.5.11+cvs20060403-2 | — |
| Debian 12 | mutt | 1.5.11+cvs20060403-2 | — |
| Debian 3.1 | mutt | 1.5.9-2sarge2 | DSA-1108 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | mutt | 5:1.4.1-11.rhel4 | RHSA-2006:0577 |
| RHEL 3 | mutt | 5:1.4.1-3.5.rhel3 | RHSA-2006:0577 |
Advisories 2
- RHSA-2006:0577 Red Hat Security Advisory: mutt security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1108 mutt - buffer overflow Debian Security (DSA / DLA) · Mar 9, 2026
References
- 21220 third-party-advisory
- GLSA-200606-27 vendor-advisory
- 20895 third-party-advisory
- 21039 third-party-advisory
- http://dev.mutt.org/cgi-bin/gitweb.cgi?p=mutt/.git%3Ba=commit%3Bh=dc0272b749f0e2b102973b7ac43dbd3908507540
- RHSA-2006:0577 vendor-advisory
- oval:org.mitre.oval:def:10826 vdb-entry signature
- 20887 third-party-advisory
- ADV-2006-2522 vdb-entry
- 20810 third-party-advisory
- MDKSA-2006:115 vendor-advisory
- USN-307-1 vendor-advisory
- 2006-0038 vendor-advisory
- http://dev.mutt.org/cgi-bin/viewcvs.cgi/mutt/imap/browse.c?r1=1.34.2.2&r2=1.34.2.3
- 20854 third-party-advisory
- 21135 third-party-advisory
- SSA:2006-207-01 vendor-advisory
- 18642 vdb-entry
- OpenPKG-SA-2006.013 vendor-advisory
- mutt-imap-namespace-bo(27428) vdb-entry
- DSA-1108 vendor-advisory
- SUSE-SR:2006:016 vendor-advisory
- 20836 third-party-advisory
- 1016482 vdb-entry
- 20960 third-party-advisory
- 20060629 rPSA-2006-0116-1 mutt mailing-list
- https://issues.rpath.com/browse/RPL-471
- 21124 third-party-advisory
- 20879 third-party-advisory