CVE-2014-9116 The write_one_header function in mutt 1.5.23 does not properly handle newline characters at the beginning of a header, which allows remote attackers to cause a denial of service (crash) via a header w...
MediumCVSS 5.0
EPSS 9.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The write_one_header function in mutt 1.5.23 does not properly handle newline characters at the beginning of a header, which allows remote attackers to cause a denial of service (crash) via a header with an empty body, which triggers a heap-based buffer overflow in the mutt_substrdup function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/mutt(Debian:12) | < 1.5.23-2 | 1.5.23-2 |
| debian/mutt(Debian:13) | < 1.5.23-2 | 1.5.23-2 |
| debian/mutt(Debian:14) | < 1.5.23-2 | 1.5.23-2 |
| SUSE linux enterprise desktop | = 12 | No fix listed |
| suse linux enterprise server | = 12 | No fix listed |
| mutt | = 1.5.23 | No fix listed |
| debian linux | = 7.0 | No fix listed |
| mageia | = 4.0 | No fix listed |
References
- Debian Security Tracker CVE-2014-9116 vendor-advisory
- advisories.mageia.org third-party-advisory
- dev.mutt.org issue-tracking vendor-advisory
- SUSE-SU-2015:0012 third-party-advisory vendor-advisory
- DSA-3083 third-party-advisory vendor-advisory
- MDVSA-2014:245 broken-link vendor-advisory
- MDVSA-2015:078 broken-link vendor-advisory
- [oss-security] 20141127 CVE request: mutt: heap-based buffer overflow in mutt_substrdup() exploit mailing-list third-party-advisory
- [oss-security] 20141126 Re: CVE request: mutt: heap-based buffer overflow in mutt_substrdup() mailing-list third-party-advisory
- 71334 third-party-advisory vdb-entry
- 1031266 third-party-advisory vdb-entry
- bugs.debian.org exploit issue-tracking
- bugzilla.redhat.com exploit issue-tracking
- GLSA-201701-04 vendor-advisory
- bugs.debian.org issue-tracking