Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
neomutt neomutt vulnerabilities and exploits
(subscribe to this query)
5.8
CVSSv2
CVE-2021-32055
Mutt 1.11.0 up to and including 2.0.x prior to 2.0.7 (and NeoMutt 2019-10-25 through 2021-05-04) has a $imap_qresync issue in which imap/util.c has an out-of-bounds read in situations where an IMAP sequence set ends with a comma. NOTE: the $imap_qresync setting for QRESYNC is not...
Mutt Mutt
Neomutt Neomutt
2.6
CVSSv2
CVE-2020-28896
Mutt prior to 2.0.2 and NeoMutt prior to 2020-11-20 did not ensure that $ssl_force_tls was processed if an IMAP server's initial server response was invalid. The connection was not properly closed, and the code could continue attempting to authenticate. This could result in ...
Mutt Mutt
Neomutt Neomutt
Debian Debian Linux 9.0
7.5
CVSSv2
CVE-2018-14361
An issue exists in NeoMutt prior to 2018-07-16. nntp.c proceeds even if memory allocation fails for messages data.
Debian Debian Linux 9.0
Debian Debian Linux 8.0
Neomutt Neomutt
5
CVSSv2
CVE-2018-14363
An issue exists in NeoMutt prior to 2018-07-16. newsrc.c does not properly restrict '/' characters that may have unsafe interaction with cache pathnames.
Debian Debian Linux 9.0
Debian Debian Linux 8.0
Neomutt Neomutt
7.5
CVSSv2
CVE-2018-14360
An issue exists in NeoMutt prior to 2018-07-16. nntp_add_group in newsrc.c has a stack-based buffer overflow because of incorrect sscanf usage.
Debian Debian Linux 9.0
Debian Debian Linux 8.0
Neomutt Neomutt
7.5
CVSSv2
CVE-2018-14349
An issue exists in Mutt prior to 1.10.1 and NeoMutt prior to 2018-07-16. imap/command.c mishandles a NO response without a message.
Debian Debian Linux 8.0
Debian Debian Linux 9.0
Mutt Mutt
Neomutt Neomutt
Canonical Ubuntu Linux 16.04
7.5
CVSSv2
CVE-2018-14351
An issue exists in Mutt prior to 1.10.1 and NeoMutt prior to 2018-07-16. imap/command.c mishandles a long IMAP status mailbox literal count size.
Mutt Mutt
Neomutt Neomutt
Canonical Ubuntu Linux 16.04
Debian Debian Linux 8.0
Debian Debian Linux 9.0
5
CVSSv2
CVE-2018-14355
An issue exists in Mutt prior to 1.10.1 and NeoMutt prior to 2018-07-16. imap/util.c mishandles ".." directory traversal in a mailbox name.
Debian Debian Linux 8.0
Debian Debian Linux 9.0
Mutt Mutt
Neomutt Neomutt
Canonical Ubuntu Linux 16.04
7.5
CVSSv2
CVE-2018-14356
An issue exists in Mutt prior to 1.10.1 and NeoMutt prior to 2018-07-16. pop.c mishandles a zero-length UID.
Debian Debian Linux 8.0
Debian Debian Linux 9.0
Mutt Mutt
Neomutt Neomutt
Canonical Ubuntu Linux 16.04
7.5
CVSSv2
CVE-2018-14353
An issue exists in Mutt prior to 1.10.1 and NeoMutt prior to 2018-07-16. imap_quote_string in imap/util.c has an integer underflow.
Mutt Mutt
Neomutt Neomutt
Canonical Ubuntu Linux 14.04
Canonical Ubuntu Linux 16.04
Canonical Ubuntu Linux 18.04
Debian Debian Linux 8.0
Debian Debian Linux 9.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
encryption
CVE-2024-4331
CVE-2024-26925
arbitrary code
CVE-2006-4304
CVE-2024-25458
CVE-2024-27077
reflected XSS
CVE-2024-4059
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »