{"id":"CVE-2018-14355","aliases":["ALPINE-CVE-2018-14355","DEBIAN-CVE-2018-14355","DLA-1455-1","DSA-4277-1","EUVD-2018-6276","GHSA-m3pf-cr3h-p92g","MGASA-2018-0447","RHSA-2020:1126","SUSE-SU-2018:2084-1","SUSE-SU-2018:2085-1","SUSE-SU-2018:2403-1","SUSE-SU-2019:1196-1","UBUNTU-CVE-2018-14355","USN-3719-1","USN-3719-3","USN-7204-1","openSUSE-SU-2024:11069-1","openSUSE-SU-2024:11079-1"],"status":"published","title":"An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/util.c...","description":"An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/util.c mishandles \"..\" directory traversal in a mailbox name.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.03227,"percentile":0.88336,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-22"],"published":"2018-07-17T00:00:00Z","modified":"2026-10-24T14:05:24Z","fixes":[{"ecosystem":"Alpine:v3.5","package":"mutt","fixed_in":["1.10.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.6","package":"mutt","fixed_in":["1.10.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"mutt","fixed_in":["1.10.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"mutt","fixed_in":["1.10.1-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"mutt","fixed_in":["1.10.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"mutt","fixed_in":["1.10.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"mutt","fixed_in":["1.10.1-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"neomutt","fixed_in":["20180716+dfsg.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"neomutt","fixed_in":["20180716+dfsg.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"neomutt","fixed_in":["20180716+dfsg.1-1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"mutt","fixed_in":["5:1.5.21-29.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"mutt-debuginfo","fixed_in":["5:1.5.21-29.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"mutt","fixed_in":["5:1.5.21-29.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"mutt-debuginfo","fixed_in":["5:1.5.21-29.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"mutt","fixed_in":["5:1.5.21-29.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"mutt-debuginfo","fixed_in":["5:1.5.21-29.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mutt","fixed_in":["5:1.5.21-29.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mutt-debuginfo","fixed_in":["5:1.5.21-29.el7"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"mutt","fixed_in":["1.5.21-6.4ubuntu2.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"mutt","fixed_in":["1.5.24-1ubuntu0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"mutt","fixed_in":["1.9.4-3ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"neomutt","fixed_in":["20171215+dfsg.1-1ubuntu0.1~esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.5","package":"mutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.6","package":"mutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"mutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"mutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"mutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"mutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"mutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"neomutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20180716+dfsg.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"neomutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20180716+dfsg.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"neomutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20180716+dfsg.1-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"mutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.23-3+deb8u1"}]}],"versions":["1.5.23-3"],"bundled":15},{"source":"osv","ecosystem":"Debian:9","package":"mutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.2-1+deb9u1"}]}],"versions":["1.7.2-1"],"bundled":15},{"source":"osv","ecosystem":"Mageia:6","package":"mutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-1.1.mga6"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"mutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:1.5.21-29.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"mutt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:1.5.21-29.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"mutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:1.5.21-29.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"mutt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:1.5.21-29.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"mutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:1.5.21-29.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"mutt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:1.5.21-29.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:1.5.21-29.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mutt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:1.5.21-29.el7"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"mutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-55.3.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"mutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-55.3.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"mutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-55.3.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"mutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-3.3.4"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"mutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.17-42.43.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"mutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.17-42.43.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"mutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.17-42.43.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"mutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.17-42.43.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"mutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.17-42.43.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"mutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-55.6.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"mutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-55.6.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"mutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-55.6.1"}]}],"bundled":16},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"mutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.21-6.4ubuntu2.2"}]}],"versions":["1.5.21-6.4ubuntu1","1.5.21-6.4ubuntu2","1.5.21-6.4ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"mutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.24-1ubuntu0.2"}]}],"versions":["1.5.23-3.1ubuntu1","1.5.23-3.1ubuntu2","1.5.24-1","1.5.24-1build1","1.5.24-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"mutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.4-3ubuntu0.1"}]}],"versions":["1.8.3+neomutt20170609-2build1","1.9.1-2","1.9.1-3","1.9.1-4","1.9.1-5","1.9.2-1","1.9.3-1","1.9.4-2","1.9.4-3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"neomutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20171215+dfsg.1-1ubuntu0.1~esm1"}]}],"versions":["20171027-1","20171027-2","20171027+dfsg.1-1","20171027+dfsg.1-2","20171027+dfsg.1-4","20171208+dfsg.1-1","20171208+dfsg.1-2","20171215+dfsg.1-1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"mutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.21-6.4ubuntu2.2"}]}],"versions":["1.5.21-6.4ubuntu1","1.5.21-6.4ubuntu2","1.5.21-6.4ubuntu2.1"],"bundled":12},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"mutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.24-1ubuntu0.1"}]}],"versions":["1.5.23-3.1ubuntu1","1.5.23-3.1ubuntu2","1.5.24-1","1.5.24-1build1"],"bundled":12},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"mutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.4-3ubuntu0.1"}]}],"versions":["1.8.3+neomutt20170609-2build1","1.9.1-2","1.9.1-3","1.9.1-4","1.9.1-5","1.9.2-1","1.9.3-1","1.9.4-2","1.9.4-3"],"bundled":12},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"mutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.24-1ubuntu0.2"}]}],"versions":["1.5.23-3.1ubuntu1","1.5.23-3.1ubuntu2","1.5.24-1","1.5.24-1build1","1.5.24-1ubuntu0.1"],"bundled":12},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"neomutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20171215+dfsg.1-1ubuntu0.1~esm1"}]}],"versions":["20171027-1","20171027-2","20171027+dfsg.1-1","20171027+dfsg.1-2","20171027+dfsg.1-4","20171208+dfsg.1-1","20171208+dfsg.1-2","20171215+dfsg.1-1"],"bundled":21},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"neomutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20191207+dfsg.1-1.1ubuntu0.1~esm1"}]}],"versions":["20180716+dfsg.1-1.2","20191111+dfsg.1-1","20191207+dfsg.1-1.1"],"bundled":21},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"neomutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20211029+dfsg1-1ubuntu0.1~esm1"}]}],"versions":["20201127+dfsg.1-1.2","20211029+dfsg1-1"],"bundled":21},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"neomutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20231103+dfsg1-1ubuntu0.1~esm1"}]}],"versions":["20220429+dfsg1-4.1","20231103+dfsg1-1","20231103+dfsg1-1build2","20231103+dfsg1-1build3"],"bundled":21},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"mutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.7-2.2"}]}],"bundled":21},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"neomutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20210205-3.3"}]}],"bundled":19}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"mutt","product":"mutt"},{"vendor":"neomutt","product":"neomutt"}],"references":[{"url":"https://gitlab.com/muttmua/mutt/commit/31eef6c766f47df8281942d19f76e35f475c781d","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://usn.ubuntu.com/3719-3/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2018/dsa-4277","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://github.com/neomutt/neomutt/commit/57971dba06346b2d7179294f4528b8d4427a7c5d","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","report"]},{"url":"https://security.gentoo.org/glsa/201810-07","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.mutt.org/news.html","tags":["x_refsource_MISC","x_transferred","Release Notes","Vendor Advisory","advisory","report"]},{"url":"https://neomutt.org/2018/07/16/release","tags":["x_refsource_MISC","x_transferred","Release Notes","Vendor Advisory","advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14355","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-m3pf-cr3h-p92g"},{"url":"https://security.alpinelinux.org/vuln/CVE-2018-14355","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-14355","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2018-0447.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=23345","tags":["report"]},{"url":"https://usn.ubuntu.com/3719-1/","tags":["web"]},{"url":"https://lists.opensuse.org/opensuse-updates/2018-08/msg00027.html","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2020:1126","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.8_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1602081","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1126.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14355","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14355","tags":["advisory","report"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182084-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1061343","tags":["report"]},{"url":"https://bugzilla.suse.com/1094717","tags":["report"]},{"url":"https://bugzilla.suse.com/1101428","tags":["report"]},{"url":"https://bugzilla.suse.com/1101566","tags":["report"]},{"url":"https://bugzilla.suse.com/1101567","tags":["report"]},{"url":"https://bugzilla.suse.com/1101568","tags":["report"]},{"url":"https://bugzilla.suse.com/1101569","tags":["report"]},{"url":"https://bugzilla.suse.com/1101570","tags":["report"]},{"url":"https://bugzilla.suse.com/1101571","tags":["report"]},{"url":"https://bugzilla.suse.com/1101573","tags":["report"]},{"url":"https://bugzilla.suse.com/1101576","tags":["report"]},{"url":"https://bugzilla.suse.com/1101577","tags":["report"]},{"url":"https://bugzilla.suse.com/1101578","tags":["report"]},{"url":"https://bugzilla.suse.com/1101581","tags":["report"]},{"url":"https://bugzilla.suse.com/1101582","tags":["report"]},{"url":"https://bugzilla.suse.com/1101583","tags":["report"]},{"url":"https://bugzilla.suse.com/1101588","tags":["report"]},{"url":"https://bugzilla.suse.com/1101589","tags":["report"]},{"url":"https://bugzilla.suse.com/980830","tags":["report"]},{"url":"https://bugzilla.suse.com/982129","tags":["report"]},{"url":"https://bugzilla.suse.com/986534","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9116","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14354","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14355","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14359","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14360","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14361","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14362","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14363","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182085-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182403-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/936807","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191196-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-14355","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3719-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3719-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3719-3","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7204-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-14349","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14350","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14351","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14352","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14353","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14354","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14356","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14357","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14358","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14359","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14362","tags":["report"]},{"url":"https://launchpad.net/bugs/1794278","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14360","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14361","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14363","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-14954","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-28896","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-32055","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-1328","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49393","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49394","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2007-1558","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14093","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14954","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28896","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-32055","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14154","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-14355","description":"An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/util.c mishandles \"..\" directory traversal in a mailbox name.","status":"published","published":"2018-07-17T17:00:00Z","modified":"2024-08-05T09:29:50.131Z","updated_at":"2026-11-02T14:35:00.589142Z"}],"euvd":[{"id":"EUVD-2018-6276","description":"An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/util.c mishandles \"..\" directory traversal in a mailbox name.","status":"published","published":"2018-07-17T17:00:00Z","modified":"2024-08-05T09:29:50Z","updated_at":"2026-11-03T02:39:47.244192Z"}],"ghsa":[{"id":"GHSA-m3pf-cr3h-p92g","title":"An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/util.c...","description":"An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/util.c mishandles \"..\" directory traversal in a mailbox name.","status":"published","published":"2022-05-13T01:26:29Z","modified":"2023-02-01T05:07:45Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:50:36.100181Z"}],"nvd":[{"id":"CVE-2018-14355","description":"An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/util.c mishandles \"..\" directory traversal in a mailbox name.","status":"published","published":"2018-07-17T17:29:00.59Z","modified":"2026-06-17T01:40:52.217Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:04:32.929986Z"}],"osv":[{"id":"ALPINE-CVE-2018-14355","description":"An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/util.c mishandles \"..\" directory traversal in a mailbox name.","status":"published","published":"2018-07-17T17:29:00.59Z","modified":"2026-10-23T17:23:34.507604391Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:27:47.187336Z"},{"id":"CVE-2018-14355","description":"An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/util.c mishandles \"..\" directory traversal in a mailbox name.","status":"published","published":"2018-07-17T17:29:00.59Z","modified":"2026-10-24T14:05:24.011526896Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:08.242347Z"},{"id":"DEBIAN-CVE-2018-14355","description":"An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/util.c mishandles \"..\" directory traversal in a mailbox name.","status":"published","published":"2018-07-17T17:29:00.59Z","modified":"2026-10-23T18:03:47.664221356Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:30.290351Z"},{"id":"RHSA-2020:1126","title":"Red Hat Security Advisory: mutt security update","status":"published","published":"2024-09-16T02:51:59Z","modified":"2026-06-26T10:47:04Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"UBUNTU-CVE-2018-14355","description":"An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/util.c mishandles \"..\" directory traversal in a mailbox name.","status":"published","published":"2018-07-17T00:00:00Z","modified":"2026-02-04T04:30:24.42086Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"},{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:17.014176Z"},{"id":"DLA-1455-1","title":"mutt - security update","status":"published","published":"2018-08-02T00:00:00Z","modified":"2026-03-09T01:01:20.221306Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DSA-4277-1","title":"mutt - security update","status":"published","published":"2018-08-17T00:00:00Z","modified":"2026-03-09T02:09:59.573891Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"MGASA-2018-0447","title":"Updated mutt packages fix security vulnerability","description":"It was discovered that Mutt incorrectly handled certain requests. An\nattacker could possibly use this to execute arbitrary code (CVE-2018-14350,\nCVE-2018-14352, CVE-2018-14354, CVE-2018-14359, CVE-2018-14358,\nCVE-2018-14353 ,CVE-2018-14357).\n\nIt was discovered that Mutt incorrectly handled certain inputs. An attacker\ncould possibly use this to access or expose sensitive information\n(CVE-2018-14355, CVE-2018-14356, CVE-2018-14351, CVE-2018-14362,\nCVE-2018-14349).\n\nnntp_add_group in newsrc.c has a stack-based buffer overflow because of\nincorrect sscanf usage (CVE-2018-14360).\n\nnntp.c proceeds even if memory allocation fails for messages data\n(CVE-2018-14361).\n\nnewsrc.c does not properlyrestrict '/' characters that may have unsafe\ninteraction with cache pathnames (CVE-2018-14363).\n","status":"published","published":"2018-11-15T22:04:32Z","modified":"2026-04-16T06:24:56.339273229Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"openSUSE-SU-2024:11069-1","title":"mutt-2.0.7-2.2 on GA media","description":"These are all security issues fixed in the mutt-2.0.7-2.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:50:48.018222Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"openSUSE-SU-2024:11079-1","title":"neomutt-20210205-3.3 on GA media","description":"These are all security issues fixed in the neomutt-20210205-3.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:21:27.947361Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2018:2084-1","title":"Security update for mutt","description":"This update for mutt fixes the following issues:\n\nSecurity issues fixed:\n\n- bsc#1101428: Mutt 1.10.1 security release update.\n- CVE-2018-14351: Fix imap/command.c that mishandles long IMAP status mailbox literal count size (bsc#1101583).\n- CVE-2018-14353: Fix imap_quote_string in imap/util.c that has an integer underflow (bsc#1101581).\n- CVE-2018-14362: Fix pop.c that does not forbid characters that may have unsafe interaction with message-cache pathnames (bsc#1101567).\n- CVE-2018-14354: Fix arbitrary command execution from remote IMAP servers via backquote characters (bsc#1101578).\n- CVE-2018-14352: Fix imap_quote_string in imap/util.c that does not leave room for quote characters (bsc#1101582).\n- CVE-2018-14356: Fix pop.c that mishandles a zero-length UID (bsc#1101576).\n- CVE-2018-14355: Fix imap/util.c that mishandles '..' directory traversal in a mailbox name (bsc#1101577).\n- CVE-2018-14349: Fix imap/command.c that mishandles a NO response without a message (bsc#1101589).\n- CVE-2018-14350: Fix imap/message.c that has a stack-based buffer overflow for a FETCH response with along INTERNALDATE field (bsc#1101588).\n- CVE-2018-14363: Fix newsrc.c that does not properlyrestrict '/' characters that may have unsafe interaction with cache pathnames (bsc#1101566).\n- CVE-2018-14359: Fix buffer overflow via base64 data (bsc#1101570).\n- CVE-2018-14358: Fix imap/message.c that has a stack-based buffer overflow for a FETCH response with along RFC822.SIZE field (bsc#1101571).\n- CVE-2018-14360: Fix nntp_add_group in newsrc.c that has a stack-based buffer overflow because of incorrect sscanf usage (bsc#1101569).\n- CVE-2018-14357: Fix that remote IMAP servers are allowed to execute arbitrary commands via backquote characters (bsc#1101573).\n- CVE-2018-14361: Fix that nntp.c proceeds even if memory allocation fails for messages data (bsc#1101568).\n\nBug fixes:\n\n- mutt reports as neomutt and incorrect version (bsc#1094717)\n- No sidebar available in mutt 1.6.1 from Tumbleweed snapshot 20160517 (bsc#980830)\n- mutt-1.6.1 unusable when built with --enable-sidebar (bsc#982129)\n- (neo)mutt displaying times in Zulu time (bsc#1061343)\n- mutt unconditionally segfaults when displaying a message (bsc#986534)\n","status":"published","published":"2018-07-27T10:45:47Z","modified":"2026-02-04T04:22:05.703181Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:2085-1","title":"Security update for mutt","description":"This update for mutt fixes the following issues:\n\nSecurity issues fixed:\n\n- bsc#1101428: Mutt 1.10.1 security release update.\n- CVE-2018-14351: Fix imap/command.c that mishandles long IMAP status mailbox literal count size (bsc#1101583).\n- CVE-2018-14353: Fix imap_quote_string in imap/util.c that has an integer underflow (bsc#1101581).\n- CVE-2018-14362: Fix pop.c that does not forbid characters that may have unsafe interaction with message-cache pathnames (bsc#1101567).\n- CVE-2018-14354: Fix arbitrary command execution from remote IMAP servers via backquote characters (bsc#1101578).\n- CVE-2018-14352: Fix imap_quote_string in imap/util.c that does not leave room for quote characters (bsc#1101582).\n- CVE-2018-14356: Fix pop.c that mishandles a zero-length UID (bsc#1101576).\n- CVE-2018-14355: Fix imap/util.c that mishandles '..' directory traversal in a mailbox name (bsc#1101577).\n- CVE-2018-14349: Fix imap/command.c that mishandles a NO response without a message (bsc#1101589).\n- CVE-2018-14350: Fix imap/message.c that has a stack-based buffer overflow for a FETCH response with along INTERNALDATE field (bsc#1101588).\n- CVE-2018-14363: Fix newsrc.c that does not properlyrestrict '/' characters that may have unsafe interaction with cache pathnames (bsc#1101566).\n- CVE-2018-14359: Fix buffer overflow via base64 data (bsc#1101570).\n- CVE-2018-14358: Fix imap/message.c that has a stack-based buffer overflow for a FETCH response with along RFC822.SIZE field (bsc#1101571).\n- CVE-2018-14360: Fix nntp_add_group in newsrc.c that has a stack-based buffer overflow because of incorrect sscanf usage (bsc#1101569).\n- CVE-2018-14357: Fix that remote IMAP servers are allowed to execute arbitrary commands via backquote characters (bsc#1101573).\n- CVE-2018-14361: Fix that nntp.c proceeds even if memory allocation fails for messages data (bsc#1101568).\n\nBug fixes:\n\n- mutt reports as neomutt and incorrect version (bsc#1094717)\n","status":"published","published":"2018-07-27T10:47:58Z","modified":"2026-02-04T02:48:11.09876Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:2403-1","title":"Security update for mutt","description":"This update for mutt fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-14352: Fix imap_quote_string in imap/util.c that does not leave room for quote characters (bsc#1101582).\n- CVE-2018-14353: Fix imap_quote_string in imap/util.c that has an integer underflow (bsc#1101581).\n- CVE-2018-14362: Fix pop.c that does not forbid characters that may have unsafe interaction with message-cache pathnames (bsc#1101567).\n- CVE-2018-14354: Fix arbitrary command execution from remote IMAP servers via backquote characters (bsc#1101578).\n- CVE-2018-14356: Fix pop.c that mishandles a zero-length UID (bsc#1101576).\n- CVE-2018-14355: Fix imap/util.c that mishandles '..' directory traversal in a mailbox name (bsc#1101577).\n- CVE-2018-14349: Fix imap/command.c that mishandles a NO response without a message (bsc#1101589).\n- CVE-2018-14350: Fix imap/message.c that has a stack-based buffer overflow for a FETCH response with along INTERNALDATE field (bsc#1101588).\n- CVE-2018-14357: Fix that remote IMAP servers are allowed to execute arbitrary commands via backquote characters (bsc#1101573).\n- CVE-2018-14359: Fix buffer overflow via base64 data (bsc#1101570).\n- CVE-2018-14358: Fix imap/message.c that has a stack-based buffer overflow for a FETCH response with along RFC822.SIZE field (bsc#1101571).\n\n\nBug fixes:\n\n- bsc#936807: On entering a 70 character subject line in mutt, a tab is added to the text after 67 characters.\n","status":"published","published":"2018-08-17T06:54:36Z","modified":"2026-02-04T03:03:36.28273Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2019:1196-1","title":"Security update for mutt","description":"This update for mutt fixes the following issues:\n\nSecurity issues fixed:\n\n- bsc#1101428: Mutt 1.10.1 security release update.\n- CVE-2018-14351: Fix imap/command.c that mishandles long IMAP status mailbox literal count size (bsc#1101583).\n- CVE-2018-14353: Fix imap_quote_string in imap/util.c that has an integer underflow (bsc#1101581).\n- CVE-2018-14362: Fix pop.c that does not forbid characters that may have unsafe interaction with message-cache pathnames (bsc#1101567).\n- CVE-2018-14354: Fix arbitrary command execution from remote IMAP servers via backquote characters (bsc#1101578).\n- CVE-2018-14352: Fix imap_quote_string in imap/util.c that does not leave room for quote characters (bsc#1101582).\n- CVE-2018-14356: Fix pop.c that mishandles a zero-length UID (bsc#1101576).\n- CVE-2018-14355: Fix imap/util.c that mishandles '..' directory traversal in a mailbox name (bsc#1101577).\n- CVE-2018-14349: Fix imap/command.c that mishandles a NO response without a message (bsc#1101589).\n- CVE-2018-14350: Fix imap/message.c that has a stack-based buffer overflow for a FETCH response with along INTERNALDATE field (bsc#1101588).\n- CVE-2018-14363: Fix newsrc.c that does not properlyrestrict '/' characters that may have unsafe interaction with cache pathnames (bsc#1101566).\n- CVE-2018-14359: Fix buffer overflow via base64 data (bsc#1101570).\n- CVE-2018-14358: Fix imap/message.c that has a stack-based buffer overflow for a FETCH response with along RFC822.SIZE field (bsc#1101571).\n- CVE-2018-14360: Fix nntp_add_group in newsrc.c that has a stack-based buffer overflow because of incorrect sscanf usage (bsc#1101569).\n- CVE-2018-14357: Fix that remote IMAP servers are allowed to execute arbitrary commands via backquote characters (bsc#1101573).\n- CVE-2018-14361: Fix that nntp.c proceeds even if memory allocation fails for messages data (bsc#1101568).\n\nBug fixes:\n\n- mutt reports as neomutt and incorrect version (bsc#1094717)\n- No sidebar available in mutt 1.6.1 from Tumbleweed snapshot 20160517 (bsc#980830)\n- mutt-1.6.1 unusable when built with --enable-sidebar (bsc#982129)\n- (neo)mutt displaying times in Zulu time (bsc#1061343)\n- mutt unconditionally segfaults when displaying a message (bsc#986534)\n","status":"published","published":"2019-05-09T06:14:33Z","modified":"2026-02-04T03:08:14.445391Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"USN-3719-1","title":"mutt vulnerabilities","description":"It was discovered that Mutt incorrectly handled certain requests.\nAn attacker could possibly use this to execute arbitrary code.\n(CVE-2018-14350, CVE-2018-14352, CVE-2018-14354, CVE-2018-14359,\nCVE-2018-14358, CVE-2018-14353 ,CVE-2018-14357)\n\nIt was discovered that Mutt incorrectly handled certain inputs.\nAn attacker could possibly use this to access or expose sensitive\ninformation. (CVE-2018-14355, CVE-2018-14356, CVE-2018-14351,\nCVE-2018-14362, CVE-2018-14349)\n","status":"published","published":"2018-07-23T12:53:19Z","modified":"2026-02-10T04:41:23Z","updated_at":"2026-11-02T16:58:13.496563Z"},{"id":"USN-3719-3","title":"mutt vulnerabilities","description":"USN-3719-1 fixed vulnerabilities in Mutt. Unfortunately, the fixes were\nnot correctly applied to the packaging for Mutt in Ubuntu 16.04 LTS.\nThis update corrects the oversight.\n\nWe apologize for the inconvenience.\n\nOriginal advisory details:\n\n It was discovered that Mutt incorrectly handled certain requests.\n An attacker could possibly use this to execute arbitrary code.\n (CVE-2018-14350, CVE-2018-14352, CVE-2018-14354, CVE-2018-14359,\n CVE-2018-14358, CVE-2018-14353 ,CVE-2018-14357)\n\n It was discovered that Mutt incorrectly handled certain inputs.\n An attacker could possibly use this to access or expose sensitive\n information. (CVE-2018-14355, CVE-2018-14356, CVE-2018-14351,\n CVE-2018-14362, CVE-2018-14349)\n","status":"published","published":"2018-09-28T03:58:55Z","modified":"2026-02-10T04:41:23Z","updated_at":"2026-11-02T16:58:13.496563Z"},{"id":"USN-7204-1","title":"neomutt vulnerabilities","description":"Jeriko One discovered that NeoMutt incorrectly handled certain IMAP\nand POP3 responses. An attacker could possibly use this issue to\ncause NeoMutt to crash, resulting in a denial of service, or\nthe execution of arbitrary code. This issue only affected\nUbuntu 18.04 LTS. (CVE-2018-14349, CVE-2018-14350, CVE-2018-14351,\nCVE-2018-14352, CVE-2018-14353, CVE-2018-14354, CVE-2018-14355,\nCVE-2018-14356, CVE-2018-14357, CVE-2018-14358, CVE-2018-14359,\nCVE-2018-14362)\n\nJeriko One discovered that NeoMutt incorrectly handled certain\nNNTP-related operations. An attacker could possibly use this issue\nto cause NeoMutt to crash, resulting in denial of service, or\nthe execution of arbitrary code. This issue only affected\nUbuntu 18.04 LTS. (CVE-2018-14360, CVE-2018-14361, CVE-2018-14363)\n\nIt was discovered that NeoMutt incorrectly processed additional data\nwhen communicating with mail servers. An attacker could possibly use\nthis issue to access senstive information. This issue only affected\nUbuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-14954, CVE-2020-28896)\n\nIt was discovered that Neomutt incorrectly handled the IMAP QRSync\nsetting. An attacker could possibly use this issue to cause NeoMutt\nto crash, resulting in denial of service. This issue only affected\nUbuntu 20.04 LTS. (CVE-2021-32055)\n\nTavis Ormandy discovered that NeoMutt incorrectly parsed uuencoded\ntext past the length of the string. An attacker could possibly use\nthis issue to enable the execution of arbitrary code. This issue\nonly affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and\nUbuntu 22.04 LTS. (CVE-2022-1328)\n\nIt was discovered that NeoMutt did not properly encrypt email headers.\nAn attacker could possibly use this issue to receive emails that were\nnot intended for them and access sensitive information. This\nvulnerability was only fixed in Ubuntu 20.04 LTS, Ubuntu 22.04 LTS,\nand Ubuntu 24.04 LTS. (CVE-2024-49393, CVE-2024-49394)\n","status":"published","published":"2025-01-15T16:07:30Z","modified":"2026-04-27T17:47:18.478449179Z","updated_at":"2026-11-02T16:58:18.876384Z"}]}}