CVE-2018-14352 An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in imap/util.c does not leave room for quote characters, leading to a stack-based buffer overflow.
CriticalCVSS 9.8
EPSS 4.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in imap/util.c does not leave room for quote characters, leading to a stack-based buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/mutt(Debian:12) | < 1.10.1-1 | 1.10.1-1 |
| debian/mutt(Debian:13) | < 1.10.1-1 | 1.10.1-1 |
| debian/mutt(Debian:14) | < 1.10.1-1 | 1.10.1-1 |
| debian/neomutt(Debian:12) | < 20180716+dfsg.1-1 | 20180716+dfsg.1-1 |
| debian/neomutt(Debian:13) | < 20180716+dfsg.1-1 | 20180716+dfsg.1-1 |
| debian/neomutt(Debian:14) | < 20180716+dfsg.1-1 | 20180716+dfsg.1-1 |
| mutt | < 1.10.1 | 1.10.1 |
| neomutt | < 20180716 | 20180716 |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 16.04 | No fix listed |
| Canonical Ubuntu Linux | = 18.04 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| debian linux | = 9.0 | No fix listed |
| alpine/mutt(Alpine:v3.5) | < 1.10.1-r0 | 1.10.1-r0 |
| alpine/mutt(Alpine:v3.6) | < 1.10.1-r0 | 1.10.1-r0 |
| alpine/mutt(Alpine:v3.7) | < 1.10.1-r0 | 1.10.1-r0 |
| alpine/mutt(Alpine:v3.8) | < 1.10.1-r0 | 1.10.1-r0 |
References
- Debian Security Tracker CVE-2018-14352 vendor-advisory
- www.mutt.org release-notes vendor-advisory
- github.com patch third-party-advisory
- gitlab.com patch third-party-advisory
- [debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update mailing-list third-party-advisory
- neomutt.org release-notes vendor-advisory
- GLSA-201810-07 third-party-advisory vendor-advisory
- USN-3719-1 third-party-advisory vendor-advisory
- USN-3719-2 third-party-advisory vendor-advisory
- USN-3719-3 third-party-advisory vendor-advisory
- DSA-4277 third-party-advisory vendor-advisory
- security.alpinelinux.org vendor-advisory
- bugs.debian.org issue-tracking
- bugs.debian.org issue-tracking