A vulnerability in Mutt and NeoMutt could lead to a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| mail-client/mutt | * | < 2.0.7 | >= 2.0.7 |
| mail-client/neomutt | * | < 20210205-r1 | >= 20210205-r1 |
Mutt is a small but very powerful text-based mail client.
NeoMutt is a command line mail reader (or MUA). It’s a fork of Mutt with added features.
It was discovered that Mutt, and NeoMutt did not properly handle certain situations where an IMAP sequence set ends with a comma.
A remote attacker could entice a user to connect to a malicious IMAP server to cause a Denial of Service condition, or other unspecified impacts.
There is no known workaround at this time.
All Mutt users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=mail-client/mutt-2.0.7"
All NeoMutt users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=mail-client/neomutt-20210205-r1"
A weakness was discovered in Mutt and NeoMutt's TLS handshake handling
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| mail-client/mutt | * | < 2.0.2 | >= 2.0.2 |
| mail-client/neomutt | * | < 20201120 | >= 20201120 |
Mutt is a small but very powerful text-based mail client.
NeoMutt is a command line mail reader (or MUA). It’s a fork of Mutt with added features.
A weakness in TLS handshake handling was found which may allow information disclosure.
A remote attacker may be able to cause information disclosure.
There is no known workaround at this time.
All Mutt users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=mail-client/mutt-2.0.2"
All NeoMutt users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=mail-client/neomutt-20201120"
A vulnerability in Mutt could lead to a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| mail-client/mutt | * | < 2.0.4-r1 | >= 2.0.4-r1 |
Mutt is a small but very powerful text-based mail client.
A memory leak could occur when a crafted email message is received.
An attacker could cause a possible Denial of Service condition.
There is no known workaround at this time.
All Mutt users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=mail-client/mutt-2.0.4-r1"
Multiple vulnerabilities have been found in Mutt and Neomutt, the worst of which could result in an access restriction bypass.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| mail-client/mutt | * | < 1.14.4 | >= 1.14.4 |
| mail-client/neomutt | * | < 20200619 | >= 20200619 |
Mutt is a small but very powerful text-based mail client.
NeoMutt is a command line mail reader (or MUA). It’s a fork of Mutt with added features.
Multiple vulnerabilities have been discovered in Mutt and Neomutt. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Mutt users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=mail-client/mutt-1.14.4"
All Neomutt users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=mail-client/neomutt-20200619"
A heap-based buffer overflow in Mutt might allow remote attackers to cause a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| mail-client/mutt | * | < 1.5.23-r5 | >= 1.5.23-r5 |
Mutt is a small but very powerful text-based mail client.
A heap-based buffer overflow was discovered in Mutt’s mutt_substrdup function.
A remote attacker could cause a Denial of Service condition.
There is no known workaround at this time.
All Mutt users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=mail-client/mutt-1.5.23-r5"
A vulnerability in Mutt could allow remote attackers to execute arbitrary code or cause a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| mail-client/mutt | * | < 1.5.22-r3 | >= 1.5.22-r3 |
Mutt is a small but powerful text-based mail client.
A heap-based buffer overflow has been discovered in the mutt_copy_hdr function.
A remote attacker could send a specially crafted message, possibly resulting in execution of arbitrary code with the privileges of the user running Mutt or a Denial of Service condition.
There is no known workaround at this time.
All Mutt users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=mail-client/mutt-1.5.22-r3"
Mutt contains a buffer overflow that could result in arbitrary code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| mail-client/mutt | * | < 1.5.11-r2 | >= 1.5.11-r2 |
Mutt is a small but very powerful text-based mail client.
TAKAHASHI Tamotsu has discovered that Mutt contains a boundary error in the "browse_get_namespace()" function in browse.c, which can be triggered when receiving an overly long namespace from an IMAP server.
A malicious IMAP server can send an overly long namespace to Mutt in order to crash the application, and possibly execute arbitrary code with the permissions of the user running Mutt.
There is no known workaround at this time.
All Mutt users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=mail-client/mutt-1.5.11-r2"