Mutt vulnerabilities

Products

• Mutt 52

Newest

• mutt Use of Out-of-range Pointer Offset in mutt CVE-2026-107570 Fix available 2.5 LowOctober 8, 2026
• mutt mutt before 2.3.2 has a show_sig_summary NULL pointer dereference. CVE-2026-43864 Fix available 2.5 LowMay 4, 2026
• mutt mutt before 2.3.2 has an infinite loop in data_object_to_stream in crypt-gpgme.c. CVE-2026-43863 Fix available 3.7 LowMay 4, 2026
• mutt In mutt before 2.3.2, the imap_auth_gss security level is mishandled. CVE-2026-43862 Fix available 3.7 LowMay 4, 2026
• mutt mutt before 2.3.2 does not check for '\0' in url_pct_decode. CVE-2026-43861 Fix available 3.7 LowMay 4, 2026
• mutt mutt before 2.3.2 sometimes truncates the hash_passwd by one byte for IMAP auth_cram MD5 digest. CVE-2026-43860 Fix available 3.7 LowMay 4, 2026
• mutt mutt before 2.3.2 sometimes uses strfcpy instead of memcpy for the IMAP auth_cram MD5 digest. CVE-2026-43859 Fix available 3.7 LowMay 4, 2026
• mutt, neomutt, red hat enterprise linux 10 +4 more +6 more Mutt: neomutt: bcc email header field is indirectly leaked by cryptographic info block CVE-2024-49395 Fix available 5.3 MediumNovember 12, 2024
• mutt, neomutt, red hat enterprise linux 7 +3 more +5 more Mutt: neomutt: in-reply-to email header field it not protected by cryptograpic signing CVE-2024-49394 Fix available 5.3 MediumNovember 12, 2024
• mutt, neomutt, red hat enterprise linux 10 +4 more +6 more Mutt: neomutt: to and cc email header fields are not protected by cryptographic signing CVE-2024-49393 Fix available 6.5 MediumNovember 12, 2024
• mutt, debian linux +1 more Undefined Behavior for Input to API in Mutt CVE-2023-4874 Fix available 4.3 MediumSeptember 9, 2023
• mutt, debian linux +1 more Undefined Behavior for Input to API in Mutt CVE-2023-4875 Fix available 2.2 LowSeptember 9, 2023
• mutt, debian linux, fedoraproject fedora +2 more Buffer Overflow in uudecoder in Mutt affecting all versions starting from 0.94.13 before 2.2.3... CVE-2022-1328 Fix available 4.3 MediumApril 14, 2022
• mutt, neomutt +1 more Mutt 1.11.0 through 2.0.x before 2.0.7 (and NeoMutt 2019-10-25 through 2021-05-04) has a ... CVE-2021-32055 Fix available 9.1 CriticalMay 5, 2021
• mutt, debian linux, fedoraproject fedora +2 more rfc822.c in Mutt through 2.0.4 allows remote attackers to cause a denial of service (mailbox... CVE-2021-3181 Fix available 6.5 MediumJanuary 19, 2021
• mutt, neomutt, debian linux +2 more Mutt before 2.0.2 and NeoMutt before 2020-11-20 did not ensure that $ssl_force_tls was processed... CVE-2020-28896 Fix available 5.3 MediumNovember 23, 2020
• mutt, neomutt, canonical ubuntu linux +3 more +5 more Mutt before 1.14.4 and NeoMutt before 2020-06-19 have a STARTTLS buffering issue that affects... CVE-2020-14954 Fix available 5.9 MediumJune 19, 2020
• mutt, canonical ubuntu linux +1 more Mutt before 1.14.3 proceeds with a connection even if, in response to a GnuTLS certificate prompt... CVE-2020-14154 Fix available 4.8 MediumJune 15, 2020
• mutt, canonical ubuntu linux, debian linux +1 more +3 more Mutt before 1.14.3 allows an IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response. CVE-2020-14093 Fix available 5.9 MediumJune 15, 2020
• mutt, debian linux +1 more Mutt before 1.5.20 patch 7 allows an attacker to cause a denial of service via a series of... CVE-2005-2351 Fix available 5.5 MediumNovember 1, 2019
• mutt, neomutt, canonical ubuntu linux +7 more +9 more An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not... CVE-2018-14362 Fix available 9.8 CriticalJuly 17, 2018
• mutt, neomutt, canonical ubuntu linux +1 more +3 more An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They have a buffer... CVE-2018-14359 Fix available 9.8 CriticalJuly 17, 2018
• mutt, neomutt, canonical ubuntu linux +1 more +3 more An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a... CVE-2018-14358 Fix available 9.8 CriticalJuly 17, 2018
• mutt, neomutt, canonical ubuntu linux +7 more +9 more An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote... CVE-2018-14357 Fix available 9.8 CriticalJuly 17, 2018
• mutt, neomutt, canonical ubuntu linux +1 more +3 more An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c mishandles a... CVE-2018-14356 Fix available 9.8 CriticalJuly 17, 2018
• mutt, neomutt, canonical ubuntu linux +1 more +3 more An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/util.c... CVE-2018-14355 Fix available 5.3 MediumJuly 17, 2018
• mutt, neomutt, canonical ubuntu linux +7 more +9 more An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote... CVE-2018-14354 Fix available 9.8 CriticalJuly 17, 2018
• mutt, neomutt, canonical ubuntu linux +1 more +3 more An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in... CVE-2018-14353 Fix available 9.8 CriticalJuly 17, 2018
• mutt, neomutt, canonical ubuntu linux +1 more +3 more An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in... CVE-2018-14352 Fix available 9.8 CriticalJuly 17, 2018
• mutt, neomutt, canonical ubuntu linux +1 more +3 more An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/command.c... CVE-2018-14351 Fix available 9.8 CriticalJuly 17, 2018
• mutt, neomutt, canonical ubuntu linux +1 more +3 more An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a... CVE-2018-14350 Fix available 9.8 CriticalJuly 17, 2018
• mutt, neomutt, canonical ubuntu linux +1 more +3 more An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/command.c... CVE-2018-14349 Fix available 9.8 CriticalJuly 17, 2018
• mutt, debian linux, mageia +2 more +4 more The write_one_header function in mutt 1.5.23 does not properly handle newline characters at the... CVE-2014-9116 Fix available 5.0 MediumMarch 17, 2014
• mutt, opensuse +1 more Buffer overflow in copy.c in Mutt before 1.5.23 allows remote attackers to cause a denial of... CVE-2014-0467 Fix available 5.0 MediumMarch 12, 2014
• mutt Mutt does not verify that the smtps server hostname matches the domain name of the subject of an... CVE-2011-1429 Fix available 5.8 MediumMarch 16, 2011
• mutt mutt_ssl.c in mutt 1.5.16 and other versions before 1.5.19, when OpenSSL is used, does not verify... CVE-2009-3766 6.8 MediumOctober 23, 2009
• mutt mutt_ssl.c in mutt 1.5.19 and 1.5.20, when OpenSSL is used, does not properly handle a '\0'... CVE-2009-3765 6.8 MediumOctober 23, 2009
• mutt Mutt 1.5.19, when linked against (1) OpenSSL (mutt_ssl.c) or (2) GnuTLS (mutt_ssl_gnutls.c),... CVE-2009-1390 Fix available 6.8 MediumJune 16, 2009
• mutt Buffer overflow in Mutt 1.4.2 might allow local users to execute arbitrary code via "&"... CVE-2007-2683 Public exploitFix available 3.5 LowMay 15, 2007
• mutt Mutt 1.5.13 and earlier does not properly use the --status-fd argument when invoking GnuPG, which... CVE-2007-1268 5.0 MediumMarch 6, 2007
• mutt The mutt_adv_mktemp function in the Mutt mail client 1.5.12 and earlier does not properly verify... CVE-2006-5298 Fix available 1.2 LowOctober 16, 2006
• mutt Race condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when... CVE-2006-5297 Fix available 1.2 LowOctober 16, 2006
• mutt Stack-based buffer overflow in the browse_get_namespace function in imap/browse.c of Mutt 1.4.2.1... CVE-2006-3242 Fix available 7.5 HighJune 27, 2006
• mutt Buffer overflow in the mutt_decode_xbit function in Handler.c for Mutt 1.5.10 allows remote... CVE-2005-2642 7.5 HighAugust 21, 2005
• mutt Buffer overflow in the index menu code (menu_pad_string of menu.c) for Mutt 1.4.1 and earlier... CVE-2004-0078 Fix available 7.5 HighMarch 3, 2004
• microsoft outlook express, mozilla, mutt +5 more +7 more The IMAP Client for Sylpheed 0.8.11 allows remote malicious IMAP servers to cause a denial of... CVE-2003-0300 5.0 MediumMay 15, 2003
• mutt, stuart parmenter balsa +1 more The IMAP Client, as used in mutt 1.4.1 and Balsa 2.0.10, allows remote malicious IMAP servers to... CVE-2003-0299 7.5 HighMay 15, 2003
• mutt Multiple off-by-one buffer overflows in the IMAP capability for Mutt 1.3.28 and earlier, and... CVE-2003-0167 Fix available 7.5 HighMarch 28, 2003
• mutt Buffer overflow in Mutt 1.4.0 and possibly earlier versions, 1.5.x up to 1.5.3, and other... CVE-2003-0140 Fix available 7.5 HighMarch 21, 2003
• mutt Vulnerability in RFC822 address parser in mutt before 1.2.5.1 and mutt 1.3.x before 1.3.25 allows... CVE-2002-0001 7.5 HighJanuary 3, 2002
• Show olderLoading…