CVE-2018-14350

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer overflow for a FETCH response with a long INTERNALDATE field.
References
Link Resource
http://www.mutt.org/news.html Release Notes Vendor Advisory
http://www.securityfocus.com/bid/104931 Third Party Advisory VDB Entry
https://github.com/neomutt/neomutt/commit/1b0f0d0988e6df4e32e9f4bf8780846ea95d4485 Patch Third Party Advisory
https://gitlab.com/muttmua/mutt/commit/3287534daa3beac68e2e83ca4b4fe8a3148ff870 Patch Third Party Advisory
https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html Mailing List Third Party Advisory
https://neomutt.org/2018/07/16/release Release Notes Vendor Advisory
https://security.gentoo.org/glsa/201810-07 Third Party Advisory
https://usn.ubuntu.com/3719-1/ Third Party Advisory
https://usn.ubuntu.com/3719-2/ Third Party Advisory
https://usn.ubuntu.com/3719-3/ Third Party Advisory
https://www.debian.org/security/2018/dsa-4277 Third Party Advisory
http://www.mutt.org/news.html Release Notes Vendor Advisory
http://www.securityfocus.com/bid/104931 Third Party Advisory VDB Entry
https://github.com/neomutt/neomutt/commit/1b0f0d0988e6df4e32e9f4bf8780846ea95d4485 Patch Third Party Advisory
https://gitlab.com/muttmua/mutt/commit/3287534daa3beac68e2e83ca4b4fe8a3148ff870 Patch Third Party Advisory
https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html Mailing List Third Party Advisory
https://neomutt.org/2018/07/16/release Release Notes Vendor Advisory
https://security.gentoo.org/glsa/201810-07 Third Party Advisory
https://usn.ubuntu.com/3719-1/ Third Party Advisory
https://usn.ubuntu.com/3719-2/ Third Party Advisory
https://usn.ubuntu.com/3719-3/ Third Party Advisory
https://www.debian.org/security/2018/dsa-4277 Third Party Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:mutt:mutt:*:*:*:*:*:*:*:*
cpe:2.3:a:neomutt:neomutt:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

History

21 Nov 2024, 03:48

Type Values Removed Values Added
References () http://www.mutt.org/news.html - Release Notes, Vendor Advisory () http://www.mutt.org/news.html - Release Notes, Vendor Advisory
References () http://www.securityfocus.com/bid/104931 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/104931 - Third Party Advisory, VDB Entry
References () https://github.com/neomutt/neomutt/commit/1b0f0d0988e6df4e32e9f4bf8780846ea95d4485 - Patch, Third Party Advisory () https://github.com/neomutt/neomutt/commit/1b0f0d0988e6df4e32e9f4bf8780846ea95d4485 - Patch, Third Party Advisory
References () https://gitlab.com/muttmua/mutt/commit/3287534daa3beac68e2e83ca4b4fe8a3148ff870 - Patch, Third Party Advisory () https://gitlab.com/muttmua/mutt/commit/3287534daa3beac68e2e83ca4b4fe8a3148ff870 - Patch, Third Party Advisory
References () https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html - Mailing List, Third Party Advisory () https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html - Mailing List, Third Party Advisory
References () https://neomutt.org/2018/07/16/release - Release Notes, Vendor Advisory () https://neomutt.org/2018/07/16/release - Release Notes, Vendor Advisory
References () https://security.gentoo.org/glsa/201810-07 - Third Party Advisory () https://security.gentoo.org/glsa/201810-07 - Third Party Advisory
References () https://usn.ubuntu.com/3719-1/ - Third Party Advisory () https://usn.ubuntu.com/3719-1/ - Third Party Advisory
References () https://usn.ubuntu.com/3719-2/ - Third Party Advisory () https://usn.ubuntu.com/3719-2/ - Third Party Advisory
References () https://usn.ubuntu.com/3719-3/ - Third Party Advisory () https://usn.ubuntu.com/3719-3/ - Third Party Advisory
References () https://www.debian.org/security/2018/dsa-4277 - Third Party Advisory () https://www.debian.org/security/2018/dsa-4277 - Third Party Advisory

Information

Published : 2018-07-17 17:29

Updated : 2024-11-21 03:48


NVD link : CVE-2018-14350

Mitre link : CVE-2018-14350

CVE.ORG link : CVE-2018-14350


JSON object : View

Products Affected

debian

  • debian_linux

mutt

  • mutt

canonical

  • ubuntu_linux

neomutt

  • neomutt
CWE
CWE-787

Out-of-bounds Write