Mutt 1.5.16

CPE Details

Mutt 1.5.16
mutt
mutt
1.5.16
2009-10-26
14h37 +00:00
2014-03-17
13h34 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:mutt:mutt:1.5.16:*:*:*:*:*:*:*

Informations

Vendor

mutt

Product

mutt

Version

1.5.16

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2023-4874 2023-09-09 14h30 +00:00 Null pointer dereference when viewing a specially crafted email in Mutt >1.5.2 <2.2.12
6.5
Moyen
CVE-2023-4875 2023-09-09 14h30 +00:00 Null pointer dereference when composing from a specially crafted draft message in Mutt >1.5.2 <2.2.12
5.7
Moyen
CVE-2022-1328 2022-04-13 22h00 +00:00 Buffer Overflow in uudecoder in Mutt affecting all versions starting from 0.94.13 before 2.2.3 allows read past end of input line
5.3
Moyen
CVE-2021-3181 2021-01-19 13h30 +00:00 rfc822.c in Mutt through 2.0.4 allows remote attackers to cause a denial of service (mailbox unavailability) by sending email messages with sequences of semicolon characters in RFC822 address fields (aka terminators of empty groups). A small email message from the attacker can cause large memory consumption, and the victim may then be unable to see email messages from other persons.
6.5
Moyen
CVE-2020-28896 2020-11-23 17h52 +00:00 Mutt before 2.0.2 and NeoMutt before 2020-11-20 did not ensure that $ssl_force_tls was processed if an IMAP server's initial server response was invalid. The connection was not properly closed, and the code could continue attempting to authenticate. This could result in authentication credentials being exposed on an unencrypted connection, or to a machine-in-the-middle.
5.3
Moyen
CVE-2020-14954 2020-06-21 14h55 +00:00 Mutt before 1.14.4 and NeoMutt before 2020-06-19 have a STARTTLS buffering issue that affects IMAP, SMTP, and POP3. When a server sends a "begin TLS" response, the client reads additional data (e.g., from a man-in-the-middle attacker) and evaluates it in a TLS context, aka "response injection."
5.9
Moyen
CVE-2020-14154 2020-06-15 14h51 +00:00 Mutt before 1.14.3 proceeds with a connection even if, in response to a GnuTLS certificate prompt, the user rejects an expired intermediate certificate.
4.8
Moyen
CVE-2020-14093 2020-06-15 02h06 +00:00 Mutt before 1.14.3 allows an IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response.
5.9
Moyen
CVE-2005-2351 2019-11-01 17h47 +00:00 Mutt before 1.5.20 patch 7 allows an attacker to cause a denial of service via a series of requests to mutt temporary files.
5.5
Moyen
CVE-2018-14349 2018-07-17 15h00 +00:00 An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/command.c mishandles a NO response without a message.
9.8
Critique
CVE-2018-14350 2018-07-17 15h00 +00:00 An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer overflow for a FETCH response with a long INTERNALDATE field.
9.8
Critique
CVE-2018-14351 2018-07-17 15h00 +00:00 An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/command.c mishandles a long IMAP status mailbox literal count size.
9.8
Critique
CVE-2018-14352 2018-07-17 15h00 +00:00 An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in imap/util.c does not leave room for quote characters, leading to a stack-based buffer overflow.
9.8
Critique
CVE-2018-14353 2018-07-17 15h00 +00:00 An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in imap/util.c has an integer underflow.
9.8
Critique
CVE-2018-14354 2018-07-17 15h00 +00:00 An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with a manual subscription or unsubscription.
9.8
Critique
CVE-2018-14355 2018-07-17 15h00 +00:00 An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/util.c mishandles ".." directory traversal in a mailbox name.
5.3
Moyen
CVE-2018-14356 2018-07-17 15h00 +00:00 An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c mishandles a zero-length UID.
9.8
Critique
CVE-2018-14357 2018-07-17 15h00 +00:00 An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with an automatic subscription.
9.8
Critique
CVE-2018-14358 2018-07-17 15h00 +00:00 An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer overflow for a FETCH response with a long RFC822.SIZE field.
9.8
Critique
CVE-2018-14359 2018-07-17 15h00 +00:00 An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They have a buffer overflow via base64 data.
9.8
Critique
CVE-2018-14362 2018-07-17 15h00 +00:00 An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not forbid characters that may have unsafe interaction with message-cache pathnames, as demonstrated by a '/' character.
9.8
Critique
CVE-2014-0467 2014-03-14 14h00 +00:00 Buffer overflow in copy.c in Mutt before 1.5.23 allows remote attackers to cause a denial of service (crash) via a crafted RFC2047 header line, related to address expansion.
5
CVE-2011-1429 2011-03-16 21h00 +00:00 Mutt does not verify that the smtps server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof an SSL SMTP server via an arbitrary certificate, a different vulnerability than CVE-2009-3766.
5.8
CVE-2009-3766 2009-10-23 17h00 +00:00 mutt_ssl.c in mutt 1.5.16 and other versions before 1.5.19, when OpenSSL is used, does not verify the domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
6.8