CVE-2018-14362

high-risk

Published 2018-07-17

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not forbid characters that may have unsafe interaction with message-cache pathnames, as demonstrated by a '/' character.

Do I need to act?

1.7% chance of exploitation in next 30 days

EPSS score — moderate exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Fix available

Upgrade to: ed9d7727dc705754871e31cb41420f0ea956495b, 6a147a62cf39c2a12cf2e96a8a62f378164548fa, 9bfab35522301794483f8f9ed60820bdec9be59e, 6aed28b40a0410ec47d40c8c7296d8d10bae7576

CVSS 9.8/10 Critical

NETWORK / LOW complexity

Affected Products (18)

Mutt

Neomutt

Ubuntu Linux

Debian Linux

Enterprise Linux Desktop

Enterprise Linux Server

Enterprise Linux Server Aus

Enterprise Linux Server Eus

Enterprise Linux Server Tus

Enterprise Linux Workstation

Affected Vendors

Debian Redhat Mutt Canonical Neomutt

References (18)

Release Notes http://www.mutt.org/news.html

Third Party Advisory https://access.redhat.com/errata/RHSA-2018:2526

Patch https://github.com/neomutt/neomutt/commit/9bfab35522301794483f8f9ed60820bdec9be5...

Patch https://gitlab.com/muttmua/mutt/commit/6aed28b40a0410ec47d40c8c7296d8d10bae7576

Mailing List https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html

Release Notes https://neomutt.org/2018/07/16/release

Third Party Advisory https://security.gentoo.org/glsa/201810-07

Third Party Advisory https://usn.ubuntu.com/3719-3/

Third Party Advisory https://www.debian.org/security/2018/dsa-4277