Gentoo FoundationMGASA-2023-0232Updated mutt/neomutt packages fix security vulnerability
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:N/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
EPSS
Percentile
70.0%
Out-of-bounds read in imap/util.c when an IMAP sequence set ends with a comma. (CVE-2021-32055) Overflow in uudecoder in Mutt allows read past end of input line (CVE-2022-1328)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 8 | noarch | mutt | < 2.0.7-1.1 | mutt-2.0.7-1.1.mga8 |
| Mageia | 8 | noarch | neomutt | < 20230517-1 | neomutt-20230517-1.mga8 |
References
bugs.mageia.org/show_bug.cgi?id=30292
gitlab.com/muttmua/mutt/-/issues/404
lists.fedoraproject.org/archives/list/[email protected]/thread/35CD7NH4NFPF5OEG2PHI3CZ3UOK3ICXR/
lists.opensuse.org/archives/list/[email protected]/thread/DR7ZSOKFQZ5EIKQHLZ37AMGVPDGDIJ5W/
lists.opensuse.org/archives/list/[email protected]/thread/YAIJ2AOB7KV4ZEDS2ZHBBCKGSPYKSKDI/
marc.info/?l=mutt-users&m=164979464612885&w=2
ubuntu.com/security/notices/USN-5392-1
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:N/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
EPSS
Percentile
70.0%