An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not forbid characters that may have unsafe interaction with message-cache pathnames, as demonstrated by a '/' character.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade mutt | Jul 30, 2018 | Jul 17, 2018 |
| Amazon Linux Ami 2 | — | Upgrade mutt-debuginfoUpgrade mutt | Apr 27, 2020 | Jul 17, 2018 |
| Centos_linux | — | Upgrade mutt-debuginfoUpgrade mutt | Aug 22, 2018 | Jul 17, 2018 |
| Debian | — | Upgrade muttUpgrade neomutt | Aug 18, 2018 | Jul 17, 2018 |
| Freebsd | — | Upgrade neomuttUpgrade mutt14Upgrade mutt | Jul 20, 2018 | Jul 17, 2018 |
| Gentoo Linux | — | Upgrade mail-client/neomutt.Upgrade net-client/mutt. | Oct 31, 2018 | Jul 17, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade mutt | Sep 27, 2018 | Jul 17, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade mutt | Sep 27, 2018 | Jul 17, 2018 |
| Oracle Solaris | — | Upgrade mail/mutt to version 1.12.1-11.4.15.0.1.2.0 on Solaris 11.4Upgrade mail/mutt to version 1.12.1-0.175.3.36.0.18.0 on Solaris 11.3 | Nov 20, 2019 | Jul 17, 2018 |
| Oracle_linux | — | Upgrade mutt | Jul 21, 2020 | Jul 16, 2018 |
| Redhat_linux | — | Upgrade muttUpgrade mutt-debuginfo | Aug 21, 2018 | Jul 17, 2018 |
| Suse | — | Upgrade muttUpgrade mutt-docUpgrade mutt-lang | Jul 28, 2018 | Jul 17, 2018 |
| Ubuntu | — | Upgrade neomutt (Ubuntu Pro)Upgrade muttUpgrade mutt-patched | Jul 31, 2018 | Jul 17, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub