Mutt before 2.0.2 and NeoMutt before 2020-11-20 did not ensure that $ssl_force_tls was processed if an IMAP server's initial server response was invalid. The connection was not properly closed, and the code could continue attempting to authenticate. This could result in authentication credentials being exposed on an unencrypted connection, or to a machine-in-the-middle.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mutt | May 4, 2022 | Nov 23, 2020 |
| Alpine Linux | — | Upgrade mutt | Aug 22, 2024 | Nov 23, 2020 |
| Amazon Linux Ami 2 | — | Upgrade muttUpgrade mutt-debuginfo | Dec 7, 2022 | Nov 23, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 23, 2020 |
| Centos_linux | — | Upgrade mutt-debuginfoUpgrade mutt-debugsourceUpgrade mutt | Nov 10, 2021 | Nov 23, 2020 |
| Debian | — | Upgrade neomuttUpgrade mutt | Dec 2, 2020 | Nov 23, 2020 |
| Freebsd | — | Upgrade mutt | Nov 22, 2020 | Nov 20, 2020 |
| Gentoo Linux | — | Upgrade mail-client/neomutt.Upgrade mail-client/mutt. | Jan 27, 2021 | Nov 23, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade mutt | Feb 22, 2021 | Nov 23, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade mutt | Jan 20, 2021 | Nov 23, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade mutt | Mar 24, 2021 | Nov 23, 2020 |
| Oracle Solaris | — | Upgrade mail/mutt to version 2.0.2-11.4.30.0.1.88.0 on Solaris 11.4 | Feb 17, 2021 | Nov 23, 2020 |
| Oracle_linux | — | Upgrade mutt | Jul 22, 2024 | Nov 20, 2020 |
| Redhat_linux | — | Upgrade mutt-debugsourceUpgrade muttNo solution existsUpgrade mutt-debuginfo | Nov 10, 2021 | Nov 23, 2020 |
| Rocky_linux | — | Upgrade mutt-debugsourceUpgrade muttUpgrade mutt-debuginfo | Mar 12, 2024 | Nov 23, 2020 |
| Suse | — | Upgrade neomutt-langUpgrade muttUpgrade neomutt-docUpgrade mutt-docUpgrade mutt-langUpgrade neomutt | Dec 1, 2020 | Nov 20, 2020 |
| Ubuntu | — | Upgrade neomutt (Ubuntu Pro)Upgrade mutt | Nov 26, 2020 | Nov 20, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub