CVE-2018-14357

high-risk

Published 2018-07-17

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with an automatic subscription.

Do I need to act?

2.3% chance of exploitation in next 30 days

EPSS score — moderate exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Fix available

Upgrade to: ed9d7727dc705754871e31cb41420f0ea956495b, 6a147a62cf39c2a12cf2e96a8a62f378164548fa, e52393740334443ae0206cab2d7caef381646725, 185152818541f5cdc059cbff3f3e8b654fc27c1d

CVSS 9.8/10 Critical

NETWORK / LOW complexity

Affected Products (20)

Mutt

Neomutt

Ubuntu Linux

Debian Linux

Enterprise Linux Desktop

Enterprise Linux Server

Enterprise Linux Server Aus

Enterprise Linux Server Eus

Enterprise Linux Server Tus

Enterprise Linux Workstation

Affected Vendors

Debian Redhat Mutt Canonical Neomutt

References (20)

Release Notes http://www.mutt.org/news.html

Third Party Advisory https://access.redhat.com/errata/RHSA-2018:2526

Patch https://github.com/neomutt/neomutt/commit/e52393740334443ae0206cab2d7caef3816467...

Patch https://gitlab.com/muttmua/mutt/commit/185152818541f5cdc059cbff3f3e8b654fc27c1d

Mailing List https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html

Release Notes https://neomutt.org/2018/07/16/release

Third Party Advisory https://security.gentoo.org/glsa/201810-07

Third Party Advisory https://usn.ubuntu.com/3719-1/

Third Party Advisory https://usn.ubuntu.com/3719-3/

Third Party Advisory https://www.debian.org/security/2018/dsa-4277