CVE-2022-1328

Synopsis Moderate: mutt security update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for mutt is now available for Red Hat Enterprise Linux 9Red Hat Product Security has rated this update as having a security ...

Debian Bug report logs - #1009734 mutt: CVE-2022-1328 Package: src:mutt; Maintainer for src:mutt is Mutt maintainers <mutt@packagesdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Fri, 15 Apr 2022 19:30:02 UTC Severity: important Tags: security, upstream Found in versions mutt/1101-21+deb ...

Several security issues were fixed in Mutt ...

Mutt before 1143 allows an IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response (CVE-2020-14093) Mutt before 1143 proceeds with a connection even if, in response to a GnuTLS certificate prompt, the user rejects an expired intermediate certificate (CVE-2020-14154) Mutt before 1144 and NeoMutt before 2020-06-19 have a STARTTLS bu ...

A flaw was found in mutt When reading unencoded messages, mutt uses the line length from the untrusted input without any validation This flaw allows an attacker to craft a malicious message, which leads to an out-of-bounds read, causing data leaks that include fragments of other unrelated messages (CVE-2022-1328) ...

Buffer Overflow in uudecoder in Mutt affecting all versions starting from 09413 before 223 allows read past end of input line ...