Red Hat Security AdvisoryRHSA-2021:4181
mutt security, bug fix, and enhancement update
Released 2021-11-09 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) mutt-5:2.0.7-1.el8
Fixes 2 records
Priority LOW 34
rfc822.c in Mutt through 2.0.4 allows remote attackers to cause a denial of service (mailbox unavailability) by sending email messages with sequences of semicolon characters in RFC822 address fields (aka terminators of e…
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.0283 · Published 2021-01-19 · Partial fix CWE-401
Priority LOW 29
Mutt before 2.0.2 and NeoMutt before 2020-11-20 did not ensure that $ssl_force_tls was processed if an IMAP server's initial server response was invalid.
CVSS 3.1MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.02351 · Published 2020-11-23 · Partial fix CWE-287
