{"id":"CVE-2018-14360","aliases":["DEBIAN-CVE-2018-14360","DLA-1455-1","DSA-4277-1","EUVD-2018-6281","GHSA-96qw-wpf6-h6f5","MGASA-2018-0447","SUSE-SU-2018:2084-1","SUSE-SU-2018:2085-1","SUSE-SU-2019:1196-1","UBUNTU-CVE-2018-14360","USN-7204-1","openSUSE-SU-2024:11069-1","openSUSE-SU-2024:11079-1"],"status":"published","title":"An issue was discovered in NeoMutt before 2018-07-16. nntp_add_group in newsrc.c has a stack...","description":"An issue was discovered in NeoMutt before 2018-07-16. nntp_add_group in newsrc.c has a stack-based buffer overflow because of incorrect sscanf usage.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02651,"percentile":0.85731,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2018-07-17T17:00:00Z","modified":"2026-10-24T14:05:22Z","fixes":[{"ecosystem":"Debian:12","package":"mutt","fixed_in":["1.9.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"mutt","fixed_in":["1.9.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"mutt","fixed_in":["1.9.1-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"neomutt","fixed_in":["20180716+dfsg.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"neomutt","fixed_in":["20180716+dfsg.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"neomutt","fixed_in":["20180716+dfsg.1-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"neomutt","fixed_in":["20171215+dfsg.1-1ubuntu0.1~esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"mutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"mutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"mutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"neomutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20180716+dfsg.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"neomutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20180716+dfsg.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"neomutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20180716+dfsg.1-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"mutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.23-3+deb8u1"}]}],"versions":["1.5.23-3"],"bundled":15},{"source":"osv","ecosystem":"Debian:9","package":"mutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.2-1+deb9u1"}]}],"versions":["1.7.2-1"],"bundled":15},{"source":"osv","ecosystem":"Mageia:6","package":"mutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-1.1.mga6"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"mutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-55.3.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"mutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-55.3.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"mutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-55.3.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"mutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-3.3.4"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"mutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-55.6.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"mutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-55.6.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"mutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-55.6.1"}]}],"bundled":16},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"neomutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20171215+dfsg.1-1ubuntu0.1~esm1"}]}],"versions":["20171027-1","20171027-2","20171027+dfsg.1-1","20171027+dfsg.1-2","20171027+dfsg.1-4","20171208+dfsg.1-1","20171208+dfsg.1-2","20171215+dfsg.1-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"neomutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20171215+dfsg.1-1ubuntu0.1~esm1"}]}],"versions":["20171027-1","20171027-2","20171027+dfsg.1-1","20171027+dfsg.1-2","20171027+dfsg.1-4","20171208+dfsg.1-1","20171208+dfsg.1-2","20171215+dfsg.1-1"],"bundled":21},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"neomutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20191207+dfsg.1-1.1ubuntu0.1~esm1"}]}],"versions":["20180716+dfsg.1-1.2","20191111+dfsg.1-1","20191207+dfsg.1-1.1"],"bundled":21},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"neomutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20211029+dfsg1-1ubuntu0.1~esm1"}]}],"versions":["20201127+dfsg.1-1.2","20211029+dfsg1-1"],"bundled":21},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"neomutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20231103+dfsg1-1ubuntu0.1~esm1"}]}],"versions":["20220429+dfsg1-4.1","20231103+dfsg1-1","20231103+dfsg1-1build2","20231103+dfsg1-1build3"],"bundled":21},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"mutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.7-2.2"}]}],"bundled":21},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"neomutt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20210205-3.3"}]}],"bundled":19}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"neomutt","product":"neomutt"}],"references":[{"url":"https://www.debian.org/security/2018/dsa-4277","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://neomutt.org/2018/07/16/release","tags":["x_refsource_MISC","x_transferred","Release Notes","Vendor Advisory","advisory","report"]},{"url":"https://github.com/neomutt/neomutt/commit/6296f7153f0c9d5e5cd3aaf08f9731e56621bdd3","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14360"},{"url":"https://github.com/advisories/GHSA-96qw-wpf6-h6f5"},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-14360","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2018-0447.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=23345","tags":["report"]},{"url":"https://usn.ubuntu.com/3719-1/","tags":["web"]},{"url":"https://lists.opensuse.org/opensuse-updates/2018-08/msg00027.html","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182084-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1061343","tags":["report"]},{"url":"https://bugzilla.suse.com/1094717","tags":["report"]},{"url":"https://bugzilla.suse.com/1101428","tags":["report"]},{"url":"https://bugzilla.suse.com/1101566","tags":["report"]},{"url":"https://bugzilla.suse.com/1101567","tags":["report"]},{"url":"https://bugzilla.suse.com/1101568","tags":["report"]},{"url":"https://bugzilla.suse.com/1101569","tags":["report"]},{"url":"https://bugzilla.suse.com/1101570","tags":["report"]},{"url":"https://bugzilla.suse.com/1101571","tags":["report"]},{"url":"https://bugzilla.suse.com/1101573","tags":["report"]},{"url":"https://bugzilla.suse.com/1101576","tags":["report"]},{"url":"https://bugzilla.suse.com/1101577","tags":["report"]},{"url":"https://bugzilla.suse.com/1101578","tags":["report"]},{"url":"https://bugzilla.suse.com/1101581","tags":["report"]},{"url":"https://bugzilla.suse.com/1101582","tags":["report"]},{"url":"https://bugzilla.suse.com/1101583","tags":["report"]},{"url":"https://bugzilla.suse.com/1101588","tags":["report"]},{"url":"https://bugzilla.suse.com/1101589","tags":["report"]},{"url":"https://bugzilla.suse.com/980830","tags":["report"]},{"url":"https://bugzilla.suse.com/982129","tags":["report"]},{"url":"https://bugzilla.suse.com/986534","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9116","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14354","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14355","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14359","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14360","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14361","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14362","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14363","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182085-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191196-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-14360","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14360","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7204-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-14349","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14350","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14351","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14352","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14353","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14354","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14355","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14356","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14357","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14358","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14359","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14361","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14362","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14363","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-14954","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-28896","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-32055","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-1328","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49393","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49394","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2007-1558","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14093","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14954","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28896","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-32055","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14154","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-14360","description":"An issue was discovered in NeoMutt before 2018-07-16. nntp_add_group in newsrc.c has a stack-based buffer overflow because of incorrect sscanf usage.","status":"published","published":"2018-07-17T17:00:00Z","modified":"2024-08-05T09:29:51.149Z","updated_at":"2026-11-02T14:35:00.237825Z"}],"euvd":[{"id":"EUVD-2018-6281","description":"An issue was discovered in NeoMutt before 2018-07-16. nntp_add_group in newsrc.c has a stack-based buffer overflow because of incorrect sscanf usage.","status":"published","published":"2018-07-17T17:00:00Z","modified":"2024-08-05T09:29:51Z","updated_at":"2026-11-03T02:39:47.244192Z"}],"ghsa":[{"id":"GHSA-96qw-wpf6-h6f5","title":"An issue was discovered in NeoMutt before 2018-07-16. nntp_add_group in newsrc.c has a stack...","description":"An issue was discovered in NeoMutt before 2018-07-16. nntp_add_group in newsrc.c has a stack-based buffer overflow because of incorrect sscanf usage.","status":"published","published":"2022-05-13T01:26:30Z","modified":"2023-02-01T05:07:46Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:50:36.63783Z"}],"nvd":[{"id":"CVE-2018-14360","description":"An issue was discovered in NeoMutt before 2018-07-16. nntp_add_group in newsrc.c has a stack-based buffer overflow because of incorrect sscanf usage.","status":"published","published":"2018-07-17T17:29:00.87Z","modified":"2026-06-17T01:40:52.967Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:04:32.929986Z"}],"osv":[{"id":"CVE-2018-14360","description":"An issue was discovered in NeoMutt before 2018-07-16. nntp_add_group in newsrc.c has a stack-based buffer overflow because of incorrect sscanf usage.","status":"published","published":"2018-07-17T17:29:00.87Z","modified":"2026-10-24T14:05:22.813027164Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:08.242347Z"},{"id":"DEBIAN-CVE-2018-14360","description":"An issue was discovered in NeoMutt before 2018-07-16. nntp_add_group in newsrc.c has a stack-based buffer overflow because of incorrect sscanf usage.","status":"published","published":"2018-07-17T17:29:00.87Z","modified":"2026-10-23T18:02:59.701477589Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:30.290351Z"},{"id":"UBUNTU-CVE-2018-14360","description":"An issue was discovered in NeoMutt before 2018-07-16. nntp_add_group in newsrc.c has a stack-based buffer overflow because of incorrect sscanf usage.","status":"published","published":"2018-07-17T17:29:00Z","modified":"2026-02-04T03:00:19.436206Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"},{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:17.014176Z"},{"id":"DLA-1455-1","title":"mutt - security update","status":"published","published":"2018-08-02T00:00:00Z","modified":"2026-03-09T01:01:20.221306Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DSA-4277-1","title":"mutt - security update","status":"published","published":"2018-08-17T00:00:00Z","modified":"2026-03-09T02:09:59.573891Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"MGASA-2018-0447","title":"Updated mutt packages fix security vulnerability","description":"It was discovered that Mutt incorrectly handled certain requests. An\nattacker could possibly use this to execute arbitrary code (CVE-2018-14350,\nCVE-2018-14352, CVE-2018-14354, CVE-2018-14359, CVE-2018-14358,\nCVE-2018-14353 ,CVE-2018-14357).\n\nIt was discovered that Mutt incorrectly handled certain inputs. An attacker\ncould possibly use this to access or expose sensitive information\n(CVE-2018-14355, CVE-2018-14356, CVE-2018-14351, CVE-2018-14362,\nCVE-2018-14349).\n\nnntp_add_group in newsrc.c has a stack-based buffer overflow because of\nincorrect sscanf usage (CVE-2018-14360).\n\nnntp.c proceeds even if memory allocation fails for messages data\n(CVE-2018-14361).\n\nnewsrc.c does not properlyrestrict '/' characters that may have unsafe\ninteraction with cache pathnames (CVE-2018-14363).\n","status":"published","published":"2018-11-15T22:04:32Z","modified":"2026-04-16T06:24:56.339273229Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"openSUSE-SU-2024:11069-1","title":"mutt-2.0.7-2.2 on GA media","description":"These are all security issues fixed in the mutt-2.0.7-2.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:50:48.018222Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"openSUSE-SU-2024:11079-1","title":"neomutt-20210205-3.3 on GA media","description":"These are all security issues fixed in the neomutt-20210205-3.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:21:27.947361Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2018:2084-1","title":"Security update for mutt","description":"This update for mutt fixes the following issues:\n\nSecurity issues fixed:\n\n- bsc#1101428: Mutt 1.10.1 security release update.\n- CVE-2018-14351: Fix imap/command.c that mishandles long IMAP status mailbox literal count size (bsc#1101583).\n- CVE-2018-14353: Fix imap_quote_string in imap/util.c that has an integer underflow (bsc#1101581).\n- CVE-2018-14362: Fix pop.c that does not forbid characters that may have unsafe interaction with message-cache pathnames (bsc#1101567).\n- CVE-2018-14354: Fix arbitrary command execution from remote IMAP servers via backquote characters (bsc#1101578).\n- CVE-2018-14352: Fix imap_quote_string in imap/util.c that does not leave room for quote characters (bsc#1101582).\n- CVE-2018-14356: Fix pop.c that mishandles a zero-length UID (bsc#1101576).\n- CVE-2018-14355: Fix imap/util.c that mishandles '..' directory traversal in a mailbox name (bsc#1101577).\n- CVE-2018-14349: Fix imap/command.c that mishandles a NO response without a message (bsc#1101589).\n- CVE-2018-14350: Fix imap/message.c that has a stack-based buffer overflow for a FETCH response with along INTERNALDATE field (bsc#1101588).\n- CVE-2018-14363: Fix newsrc.c that does not properlyrestrict '/' characters that may have unsafe interaction with cache pathnames (bsc#1101566).\n- CVE-2018-14359: Fix buffer overflow via base64 data (bsc#1101570).\n- CVE-2018-14358: Fix imap/message.c that has a stack-based buffer overflow for a FETCH response with along RFC822.SIZE field (bsc#1101571).\n- CVE-2018-14360: Fix nntp_add_group in newsrc.c that has a stack-based buffer overflow because of incorrect sscanf usage (bsc#1101569).\n- CVE-2018-14357: Fix that remote IMAP servers are allowed to execute arbitrary commands via backquote characters (bsc#1101573).\n- CVE-2018-14361: Fix that nntp.c proceeds even if memory allocation fails for messages data (bsc#1101568).\n\nBug fixes:\n\n- mutt reports as neomutt and incorrect version (bsc#1094717)\n- No sidebar available in mutt 1.6.1 from Tumbleweed snapshot 20160517 (bsc#980830)\n- mutt-1.6.1 unusable when built with --enable-sidebar (bsc#982129)\n- (neo)mutt displaying times in Zulu time (bsc#1061343)\n- mutt unconditionally segfaults when displaying a message (bsc#986534)\n","status":"published","published":"2018-07-27T10:45:47Z","modified":"2026-02-04T04:22:05.703181Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:2085-1","title":"Security update for mutt","description":"This update for mutt fixes the following issues:\n\nSecurity issues fixed:\n\n- bsc#1101428: Mutt 1.10.1 security release update.\n- CVE-2018-14351: Fix imap/command.c that mishandles long IMAP status mailbox literal count size (bsc#1101583).\n- CVE-2018-14353: Fix imap_quote_string in imap/util.c that has an integer underflow (bsc#1101581).\n- CVE-2018-14362: Fix pop.c that does not forbid characters that may have unsafe interaction with message-cache pathnames (bsc#1101567).\n- CVE-2018-14354: Fix arbitrary command execution from remote IMAP servers via backquote characters (bsc#1101578).\n- CVE-2018-14352: Fix imap_quote_string in imap/util.c that does not leave room for quote characters (bsc#1101582).\n- CVE-2018-14356: Fix pop.c that mishandles a zero-length UID (bsc#1101576).\n- CVE-2018-14355: Fix imap/util.c that mishandles '..' directory traversal in a mailbox name (bsc#1101577).\n- CVE-2018-14349: Fix imap/command.c that mishandles a NO response without a message (bsc#1101589).\n- CVE-2018-14350: Fix imap/message.c that has a stack-based buffer overflow for a FETCH response with along INTERNALDATE field (bsc#1101588).\n- CVE-2018-14363: Fix newsrc.c that does not properlyrestrict '/' characters that may have unsafe interaction with cache pathnames (bsc#1101566).\n- CVE-2018-14359: Fix buffer overflow via base64 data (bsc#1101570).\n- CVE-2018-14358: Fix imap/message.c that has a stack-based buffer overflow for a FETCH response with along RFC822.SIZE field (bsc#1101571).\n- CVE-2018-14360: Fix nntp_add_group in newsrc.c that has a stack-based buffer overflow because of incorrect sscanf usage (bsc#1101569).\n- CVE-2018-14357: Fix that remote IMAP servers are allowed to execute arbitrary commands via backquote characters (bsc#1101573).\n- CVE-2018-14361: Fix that nntp.c proceeds even if memory allocation fails for messages data (bsc#1101568).\n\nBug fixes:\n\n- mutt reports as neomutt and incorrect version (bsc#1094717)\n","status":"published","published":"2018-07-27T10:47:58Z","modified":"2026-02-04T02:48:11.09876Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2019:1196-1","title":"Security update for mutt","description":"This update for mutt fixes the following issues:\n\nSecurity issues fixed:\n\n- bsc#1101428: Mutt 1.10.1 security release update.\n- CVE-2018-14351: Fix imap/command.c that mishandles long IMAP status mailbox literal count size (bsc#1101583).\n- CVE-2018-14353: Fix imap_quote_string in imap/util.c that has an integer underflow (bsc#1101581).\n- CVE-2018-14362: Fix pop.c that does not forbid characters that may have unsafe interaction with message-cache pathnames (bsc#1101567).\n- CVE-2018-14354: Fix arbitrary command execution from remote IMAP servers via backquote characters (bsc#1101578).\n- CVE-2018-14352: Fix imap_quote_string in imap/util.c that does not leave room for quote characters (bsc#1101582).\n- CVE-2018-14356: Fix pop.c that mishandles a zero-length UID (bsc#1101576).\n- CVE-2018-14355: Fix imap/util.c that mishandles '..' directory traversal in a mailbox name (bsc#1101577).\n- CVE-2018-14349: Fix imap/command.c that mishandles a NO response without a message (bsc#1101589).\n- CVE-2018-14350: Fix imap/message.c that has a stack-based buffer overflow for a FETCH response with along INTERNALDATE field (bsc#1101588).\n- CVE-2018-14363: Fix newsrc.c that does not properlyrestrict '/' characters that may have unsafe interaction with cache pathnames (bsc#1101566).\n- CVE-2018-14359: Fix buffer overflow via base64 data (bsc#1101570).\n- CVE-2018-14358: Fix imap/message.c that has a stack-based buffer overflow for a FETCH response with along RFC822.SIZE field (bsc#1101571).\n- CVE-2018-14360: Fix nntp_add_group in newsrc.c that has a stack-based buffer overflow because of incorrect sscanf usage (bsc#1101569).\n- CVE-2018-14357: Fix that remote IMAP servers are allowed to execute arbitrary commands via backquote characters (bsc#1101573).\n- CVE-2018-14361: Fix that nntp.c proceeds even if memory allocation fails for messages data (bsc#1101568).\n\nBug fixes:\n\n- mutt reports as neomutt and incorrect version (bsc#1094717)\n- No sidebar available in mutt 1.6.1 from Tumbleweed snapshot 20160517 (bsc#980830)\n- mutt-1.6.1 unusable when built with --enable-sidebar (bsc#982129)\n- (neo)mutt displaying times in Zulu time (bsc#1061343)\n- mutt unconditionally segfaults when displaying a message (bsc#986534)\n","status":"published","published":"2019-05-09T06:14:33Z","modified":"2026-02-04T03:08:14.445391Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"USN-7204-1","title":"neomutt vulnerabilities","description":"Jeriko One discovered that NeoMutt incorrectly handled certain IMAP\nand POP3 responses. An attacker could possibly use this issue to\ncause NeoMutt to crash, resulting in a denial of service, or\nthe execution of arbitrary code. This issue only affected\nUbuntu 18.04 LTS. (CVE-2018-14349, CVE-2018-14350, CVE-2018-14351,\nCVE-2018-14352, CVE-2018-14353, CVE-2018-14354, CVE-2018-14355,\nCVE-2018-14356, CVE-2018-14357, CVE-2018-14358, CVE-2018-14359,\nCVE-2018-14362)\n\nJeriko One discovered that NeoMutt incorrectly handled certain\nNNTP-related operations. An attacker could possibly use this issue\nto cause NeoMutt to crash, resulting in denial of service, or\nthe execution of arbitrary code. This issue only affected\nUbuntu 18.04 LTS. (CVE-2018-14360, CVE-2018-14361, CVE-2018-14363)\n\nIt was discovered that NeoMutt incorrectly processed additional data\nwhen communicating with mail servers. An attacker could possibly use\nthis issue to access senstive information. This issue only affected\nUbuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-14954, CVE-2020-28896)\n\nIt was discovered that Neomutt incorrectly handled the IMAP QRSync\nsetting. An attacker could possibly use this issue to cause NeoMutt\nto crash, resulting in denial of service. This issue only affected\nUbuntu 20.04 LTS. (CVE-2021-32055)\n\nTavis Ormandy discovered that NeoMutt incorrectly parsed uuencoded\ntext past the length of the string. An attacker could possibly use\nthis issue to enable the execution of arbitrary code. This issue\nonly affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and\nUbuntu 22.04 LTS. (CVE-2022-1328)\n\nIt was discovered that NeoMutt did not properly encrypt email headers.\nAn attacker could possibly use this issue to receive emails that were\nnot intended for them and access sensitive information. This\nvulnerability was only fixed in Ubuntu 20.04 LTS, Ubuntu 22.04 LTS,\nand Ubuntu 24.04 LTS. (CVE-2024-49393, CVE-2024-49394)\n","status":"published","published":"2025-01-15T16:07:30Z","modified":"2026-04-27T17:47:18.478449179Z","updated_at":"2026-11-02T16:58:18.876384Z"}]}}