CVE-2018-14352
mutt: An issue was discovered in Mutt before 1.10.1 and NeoMutt before2018-07-16
CVE-2018-14352 is fixed in 2 products on 1 platform, first by mutt 1.9.4-3ubuntu0.1, released July 16, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0402
90th percentile
An issue was discovered in Mutt before 1.10.1 and NeoMutt before2018-07-16. imap_quote_string in imap/util.c does not leave room for quotecharacters, leading to a stack-based buffer overflow.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| mutt · Ubuntu 18.04.6 LTS (bionic) | 1.9.4-3ubuntu0.1 | mutt 1.9.4-3ubuntu0.1 | Jul 16, 2018 |
| mutt · Ubuntu 24.10 (oracular) | 1.10.1-1 | mutt 1.10.1-1 | Jul 17, 2018 |
| neomutt · Ubuntu 18.04.6 LTS (bionic) | 20171215+dfsg.1-1ubuntu0.1~esm1 | neomutt 20171215+dfsg.1-1ubuntu0.1~esm1 | Apr 14, 2022 |