mutt vulnerabilities (Debian)
48 vulnerabilities.
-
muttDebian Use of Out-of-range Pointer Offset in mutt 2.5 Low -
muttDebian mutt before 2.3.2 has a show_sig_summary NULL pointer dereference. 2.5 Low -
muttDebian mutt before 2.3.2 has an infinite loop in data_object_to_stream in crypt-gpgme.c. 3.7 Low -
muttDebian In mutt before 2.3.2, the imap_auth_gss security level is mishandled. 3.7 Low -
muttDebian mutt before 2.3.2 does not check for '\0' in url_pct_decode. 3.7 Low -
muttDebian mutt before 2.3.2 sometimes truncates the hash_passwd by one byte for IMAP auth_cram MD5 digest. 3.7 Low -
muttDebian mutt before 2.3.2 sometimes uses strfcpy instead of memcpy for the IMAP auth_cram MD5 digest. 3.7 Low -
muttDebian Mutt: neomutt: bcc email header field is indirectly leaked by cryptographic info block 5.3 Medium -
muttDebian Mutt: neomutt: in-reply-to email header field it not protected by cryptograpic signing 5.3 Medium -
muttDebian Mutt: neomutt: to and cc email header fields are not protected by cryptographic signing 6.5 Medium -
muttDebian Undefined Behavior for Input to API in Mutt 4.3 Medium -
muttDebian Undefined Behavior for Input to API in Mutt 2.2 Low -
muttDebian Buffer Overflow in uudecoder in Mutt affecting all versions starting from 0.94.13 before 2.2.3... 4.3 Medium -
muttDebian Mutt 1.11.0 through 2.0.x before 2.0.7 (and NeoMutt 2019-10-25 through 2021-05-04) has a ... 9.1 Critical -
muttDebian rfc822.c in Mutt through 2.0.4 allows remote attackers to cause a denial of service (mailbox... 6.5 Medium -
muttDebian Mutt before 2.0.2 and NeoMutt before 2020-11-20 did not ensure that $ssl_force_tls was processed... 5.3 Medium -
muttDebian Mutt before 1.14.4 and NeoMutt before 2020-06-19 have a STARTTLS buffering issue that affects... 5.9 Medium -
muttDebian Mutt before 1.14.3 proceeds with a connection even if, in response to a GnuTLS certificate prompt... 4.8 Medium -
muttDebian Mutt before 1.14.3 allows an IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response. 5.9 Medium -
muttDebian Mutt before 1.5.20 patch 7 allows an attacker to cause a denial of service via a series of... 5.5 Medium -
muttDebian An issue was discovered in NeoMutt before 2018-07-16. newsrc.c does not properly restrict '/'... 7.5 High -
muttDebian An issue was discovered in NeoMutt before 2018-07-16. nntp.c proceeds even if memory allocation... 9.8 Critical -
muttDebian An issue was discovered in NeoMutt before 2018-07-16. nntp_add_group in newsrc.c has a stack... 9.8 Critical -
muttDebian An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not... 9.8 Critical -
muttDebian An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They have a buffer... 9.8 Critical -
muttDebian An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a... 9.8 Critical -
muttDebian An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote... 9.8 Critical -
muttDebian An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c mishandles a... 9.8 Critical -
muttDebian An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/util.c... 5.3 Medium -
muttDebian An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote... 9.8 Critical -
muttDebian An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in... 9.8 Critical -
muttDebian An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in... 9.8 Critical -
muttDebian An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/command.c... 9.8 Critical -
muttDebian An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a... 9.8 Critical -
muttDebian An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/command.c... 9.8 Critical -
muttDebian The write_one_header function in mutt 1.5.23 does not properly handle newline characters at the... 5.0 Medium -
muttDebian Buffer overflow in copy.c in Mutt before 1.5.23 allows remote attackers to cause a denial of... 5.0 Medium -
muttDebian Mutt does not verify that the smtps server hostname matches the domain name of the subject of an... 5.8 Medium -
muttDebian Mutt 1.5.19, when linked against (1) OpenSSL (mutt_ssl.c) or (2) GnuTLS (mutt_ssl_gnutls.c),... 6.8 Medium -
muttDebian Buffer overflow in Mutt 1.4.2 might allow local users to execute arbitrary code via "&"... 3.5 Low -
muttDebian The APOP protocol allows remote attackers to guess the first 3 characters of a password via man... 2.6 Low -
muttDebian Mutt 1.5.13 and earlier does not properly use the --status-fd argument when invoking GnuPG, which... 5.0 Medium -
muttDebian The mutt_adv_mktemp function in the Mutt mail client 1.5.12 and earlier does not properly verify... 1.2 Low -
muttDebian Race condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when... 1.2 Low -
muttDebian Stack-based buffer overflow in the browse_get_namespace function in imap/browse.c of Mutt 1.4.2.1... 7.5 High -
muttDebian Buffer overflow in the index menu code (menu_pad_string of menu.c) for Mutt 1.4.1 and earlier... 7.5 High -
muttDebian Multiple off-by-one buffer overflows in the IMAP capability for Mutt 1.3.28 and earlier, and... 7.5 High -
muttDebian Buffer overflow in Mutt 1.4.0 and possibly earlier versions, 1.5.x up to 1.5.3, and other... 7.5 High