mutt

Records53All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical12CVSS 9.0–10.0

CVSS high10CVSS 7.0–8.9

Exploited now

mutt records in CISA KEV

No mutt vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mutt 45 records MEDIUM Mutt Mail Client 1 record LOW

Records

53 records

TI-2018-10297 CVE-2018-14354 · GHSA-5hcq-hmph-mw8w

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16.

MEDIUM 51

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06151 Published 2018-07-17 Partial fix CWE-78

TI-2018-10300 CVE-2018-14357 · GHSA-9f9v-862j-6944

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16.

MEDIUM 50

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04954 Published 2018-07-17 Partial fix CWE-78

TI-2018-10293 CVE-2018-14350 · GHSA-7w2q-7h6m-p79f

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16.

MEDIUM 50

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04956 Published 2018-07-17 Fix deferred CWE-787

TI-2018-10302 CVE-2018-14359 · GHSA-vxp5-h7wr-q8p3

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16.

MEDIUM 49

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04019 Published 2018-07-17 Fix deferred CWE-120

TI-2018-10301 CVE-2018-14358 · GHSA-4ch4-m86j-485w

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16.

MEDIUM 49

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03915 Published 2018-07-17 Fix deferred CWE-787

TI-2018-10295 CVE-2018-14352 · GHSA-28w7-5v3f-jc8j

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16.

MEDIUM 49

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04019 Published 2018-07-17 Fix deferred CWE-787

TI-2018-10305 CVE-2018-14362 · GHSA-8wxh-p6hf-c3ph

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16.

MEDIUM 48

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03667 Published 2018-07-17 Fixed CWE-119

TI-2018-10299 CVE-2018-14356 · GHSA-gg9p-xjx9-q4r7

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16.

MEDIUM 48

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03166 Published 2018-07-17 Fix deferred CWE-824

TI-2018-10296 CVE-2018-14353 · GHSA-g6hr-h94m-w92x

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16.

MEDIUM 48

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03698 Published 2018-07-17 Fix deferred CWE-191

TI-2018-10294 CVE-2018-14351 · GHSA-4wf8-hmff-q9qr

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16.

MEDIUM 48

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03166 Published 2018-07-17 Fix deferred CWE-20

TI-2018-10292 CVE-2018-14349 · GHSA-8pq8-fvxj-2gx6

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16.

MEDIUM 48

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03166 Published 2018-07-17 Fix deferred CWE-20

TI-2021-12020 CVE-2021-32055 · GHSA-vchg-jq4g-j9q7

Mutt 1.11.0 through 2.0.x before 2.0.7 (and NeoMutt 2019-10-25 through 2021-05-04) has a…

MEDIUM 44

Mutt 1.11.0 through 2.0.x before 2.0.7 (and NeoMutt 2019-10-25 through 2021-05-04) has a $imap_qresync issue in which imap/util.c has an out-of-bounds read in situations where an IMAP sequence set ends with a comma.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.02551 Published 2021-05-05 No fix listed CWE-125

TI-2006-03142 CVE-2006-3242 · GHSA-pg87-fxp9-w848

Stack-based buffer overflow in the browse_get_namespace function in imap/browse.c of Mutt…

MEDIUM 42

Stack-based buffer overflow in the browse_get_namespace function in imap/browse.c of Mutt 1.4.2.1 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via long namespaces rec…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05999 Published 2006-06-27 Fixed

TI-2004-00065 CVE-2004-0078 · GHSA-rrvh-pgqf-54ph

Buffer overflow in the index menu code (menu_pad_string of menu.c) for Mutt 1.4.1 and…

MEDIUM 41

Buffer overflow in the index menu code (menu_pad_string of menu.c) for Mutt 1.4.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain mail messages.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05427 Published 2004-09-01 Fixed

TI-2005-02506 CVE-2005-2642 · GHSA-phm9-v495-4q75

Buffer overflow in the mutt_decode_xbit function in Handler.c for Mutt 1.5.10 allows…

MEDIUM 40

Buffer overflow in the mutt_decode_xbit function in Handler.c for Mutt 1.5.10 allows remote attackers to execute arbitrary code, possibly due to interactions with libiconv or gettext.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04479 Published 2005-08-21 No fix listed

TI-2003-00135 CVE-2003-0140 · GHSA-qj3j-m7h3-hrhc

Buffer overflow in Mutt 1.4.0 and possibly earlier versions, 1.5.x up to 1.5.3, and other…

MEDIUM 40

Buffer overflow in Mutt 1.4.0 and possibly earlier versions, 1.5.x up to 1.5.3, and other programs that use Mutt code such as Balsa before 2.0.10, allows a remote malicious IMAP server to cause a denial of service (crash…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04494 Published 2003-03-21 Fixed

TI-2002-00001 CVE-2002-0001 · GHSA-w4gg-mg7c-qmxp

Vulnerability in RFC822 address parser in mutt before 1.2.5.1 and mutt 1.3.x before…

LOW 39

Vulnerability in RFC822 address parser in mutt before 1.2.5.1 and mutt 1.3.x before 1.3.25 allows remote attackers to execute arbitrary commands via an improperly terminated comment or phrase in the address list.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03369 Published 2002-01-03 Fixed

TI-2003-00159 CVE-2003-0167 · GHSA-v7m5-jjhm-hp24

Multiple off-by-one buffer overflows in the IMAP capability for Mutt 1.3.28 and earlier…

LOW 38

Multiple off-by-one buffer overflows in the IMAP capability for Mutt 1.3.28 and earlier, and Balsa 1.2.4 and earlier, allow a remote malicious IMAP server to cause a denial of service (crash) and possibly execute arbitra…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02543 Published 2003-03-29 No fix listed

TI-1999-00890 CVE-1999-0940 · GHSA-pm3w-22f3-8w8x

Buffer overflow in mutt mail client allows remote attackers to execute commands via malformed MIME messages.

LOW 38

Buffer overflow in mutt mail client allows remote attackers to execute commands via malformed MIME messages.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02663 Published 2000-01-04 No fix listed

TI-2003-00280 CVE-2003-0299 · GHSA-gvqm-8xhg-hprq

The IMAP Client, as used in mutt 1.4.1 and Balsa 2.0.10, allows remote malicious IMAP…

LOW 37

The IMAP Client, as used in mutt 1.4.1 and Balsa 2.0.10, allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large mailbox size values that cause either integ…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02105 Published 2003-05-15 No fix listed

TI-2001-00465 CVE-2001-0473 · GHSA-69cf-v4wg-q552

Format string vulnerability in Mutt before 1.2.5 allows a remote malicious IMAP server to execute arbitrary commands.

LOW 37

Format string vulnerability in Mutt before 1.2.5 allows a remote malicious IMAP server to execute arbitrary commands.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0206 Published 2001-09-18 Fixed

TI-1999-00891 CVE-1999-0941 · GHSA-36xr-hxmp-hqwm

Mutt mail client allows a remote attacker to execute commands via shell metacharacters.

LOW 37

Mutt mail client allows a remote attacker to execute commands via shell metacharacters.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01846 Published 2000-02-04 No fix listed

TI-2014-07402 CVE-2014-9116 · GHSA-mv99-5p2c-93vv

The write_one_header function in mutt 1.5.23 does not properly handle newline characters…

LOW 35

The write_one_header function in mutt 1.5.23 does not properly handle newline characters at the beginning of a header, which allows remote attackers to cause a denial of service (crash) via a header with an empty body, w…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.09694 Published 2014-12-02 Will not fix CWE-119

TI-2021-02257 CVE-2021-3181 · GHSA-prp6-7gc9-4jmw

rfc822.c in Mutt through 2.0.4 allows remote attackers to cause a denial of service…

LOW 34

rfc822.c in Mutt through 2.0.4 allows remote attackers to cause a denial of service (mailbox unavailability) by sending email messages with sequences of semicolon characters in RFC822 address fields (aka terminators of e…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0283 Published 2021-01-19 Partial fix CWE-401

TI-2009-01323 CVE-2009-1390 · GHSA-j2p5-74xw-f54p

Mutt 1.5.19, when linked against (1) OpenSSL (mutt_ssl.c) or (2) GnuTLS…

LOW 33

Mutt 1.5.19, when linked against (1) OpenSSL (mutt_ssl.c) or (2) GnuTLS (mutt_ssl_gnutls.c), allows connections when only one TLS certificate in the chain is accepted instead of verifying the entire chain, which allows r…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01669 Published 2009-06-16 No fix listed CWE-287

Open these records in search →