9.8

CVE-2018-14349

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/command.c mishandles a NO response without a message.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Debian ≫ Debian Linux Version 8.0
Debian ≫ Debian Linux Version 9.0
Mutt ≫ Mutt Version < 1.10.1
Neomutt ≫ Neomutt Version < 20180716
Canonical ≫ Ubuntu Linux Version 16.04 SwEdition lts
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.17% 0.863
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.mutt.org/news.html
Vendor Advisory
Release Notes
https://github.com/neomutt/neomutt/commit/36a29280448097f34ce9c94606195f2ac643fed1
Patch
Third Party Advisory
https://gitlab.com/muttmua/mutt/commit/9347b5c01dc52682cb6be11539d9b7ebceae4416
Patch
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html
Third Party Advisory
Mailing List
https://neomutt.org/2018/07/16/release
Vendor Advisory
Release Notes
https://security.gentoo.org/glsa/201810-07
Third Party Advisory
https://usn.ubuntu.com/3719-3/
Third Party Advisory
https://www.debian.org/security/2018/dsa-4277
Third Party Advisory