Published: 09/09/2023 Updated: 15/10/2023

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 0

DescriptionA null pointer dereference flaw was found in mutt when handling specially crafted characters. This issue could allow an malicious user to send a specially crafted email that causes the email client to crash when reading or processing the email.A null pointer dereference flaw was found in mutt when handling specially crafted characters. This issue could allow an malicious user to send a specially crafted email that causes the email client to crash when reading or processing the email.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mutt mutt
debian debian linux 10.0
debian debian linux 11.0
debian debian linux 12.0

Debian Bug report logs - #1051563 mutt: CVE-2023-4874 CVE-2023-4875 Package: src:mutt; Maintainer for src:mutt is Mutt maintainers <mutt@packagesdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sat, 9 Sep 2023 20:27:01 UTC Severity: grave Tags: security, upstream Found in versions mutt/22 ...

Several NULL pointer dereference flaws were discovered in Mutt, a text-based mailreader supporting MIME, GPG, PGP and threading, which may result in denial of service (application crash) when viewing a specially crafted email or when composing from a specially crafted draft message For the oldstable distribution (bullseye), these problems have bee ...

Null pointer dereference when viewing a specially crafted email in Mutt >152 <2212 (CVE-2023-4874) Null pointer dereference when composing from a specially crafted draft message in Mutt >152 <2212 (CVE-2023-4875) ...

DescriptionA null pointer dereference flaw was found in mutt when handling specially crafted characters This issue could allow an attacker to send a specially crafted email that causes the email client to crash when reading or processing the emailA null pointer dereference flaw was found in mutt when handling specially crafted characters ...

CWE-476 https://gitlab.com/muttmua/mutt/-/commit/a4752eb0ae0a521eec02e59e51ae5daedf74fda0.patch https://gitlab.com/muttmua/mutt/-/commit/452ee330e094bfc7c9a68555e5152b1826534555.patch https://www.debian.org/security/2023/dsa-5494 https://lists.debian.org/debian-lts-announce/2023/09/msg00021.html http://www.openwall.com/lists/oss-security/2023/09/26/6 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1051563 https://nvd.nist.gov https://www.debian.org/security/2023/dsa-5494 https://access.redhat.com/security/cve/cve-2023-4874

CVE-2023-4874

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect