Mutt before 2.0.2 and NeoMutt before 2020-11-20 did not ensure that $ssl_force_tls was processed if an IMAP server's initial server response was invalid. The connection was not properly closed, and the code could continue attempting to authenticate. This could result in authentication credentials being exposed on an unencrypted connection, or to a machine-in-the-middle.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-mutt | May 4, 2022 | Nov 23, 2020 | |
| Alpine Linux | alpine-linux-upgrade-mutt | Aug 22, 2024 | Nov 23, 2020 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-muttamazon-linux-ami-2-upgrade-mutt-debuginfo | Dec 7, 2022 | Nov 23, 2020 | |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Nov 23, 2020 | |
| Centos_linux | — | centos-upgrade-muttcentos-upgrade-mutt-debuginfocentos-upgrade-mutt-debugsource | Nov 10, 2021 | Nov 23, 2020 |
| Debian | debian-upgrade-muttdebian-upgrade-neomutt | Dec 2, 2020 | Nov 23, 2020 | |
| Freebsd | freebsd-upgrade-package-mutt | Nov 22, 2020 | Nov 20, 2020 | |
| Gentoo Linux | gentoo-linux-upgrade-mail-client-muttgentoo-linux-upgrade-mail-client-neomutt | Jan 27, 2021 | Nov 23, 2020 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-mutt | Feb 22, 2021 | Nov 23, 2020 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-mutt | Jan 20, 2021 | Nov 23, 2020 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-mutt | Mar 24, 2021 | Nov 23, 2020 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-mail-mutt-2-0-2-11-4-30-0-1-88-0 | Feb 17, 2021 | Nov 23, 2020 | |
| Oracle_linux | — | oracle-linux-upgrade-mutt | Jul 22, 2024 | Nov 20, 2020 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-muttredhat-upgrade-mutt-debuginforedhat-upgrade-mutt-debugsource | Nov 10, 2021 | Nov 23, 2020 | |
| Rocky_linux | rocky-upgrade-muttrocky-upgrade-mutt-debuginforocky-upgrade-mutt-debugsource | Mar 12, 2024 | Nov 23, 2020 | |
| Suse | — | suse-upgrade-muttsuse-upgrade-mutt-docsuse-upgrade-mutt-langsuse-upgrade-neomuttsuse-upgrade-neomutt-docsuse-upgrade-neomutt-lang | Dec 1, 2020 | Nov 20, 2020 |
| Ubuntu | ubuntu-pro-upgrade-neomuttubuntu-upgrade-mutt | Nov 26, 2020 | Nov 20, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub