CVE-2018-14355
mutt: An issue was discovered in Mutt before 1.10.1 and NeoMutt before2018-07-16
CVE-2018-14355 is fixed in 2 products on 1 platform, first by mutt 1.9.4-3ubuntu0.1, released July 16, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0323
88th percentile
An issue was discovered in Mutt before 1.10.1 and NeoMutt before2018-07-16. imap/util.c mishandles ".." directory traversal in a mailboxname.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| mutt · Ubuntu 18.04.6 LTS (bionic) | 1.9.4-3ubuntu0.1 | mutt 1.9.4-3ubuntu0.1 | Jul 16, 2018 |
| mutt · Ubuntu 24.10 (oracular) | 1.10.1-1 | mutt 1.10.1-1 | Jul 17, 2018 |
| neomutt · Ubuntu 18.04.6 LTS (bionic) | 20171215+dfsg.1-1ubuntu0.1~esm1 | neomutt 20171215+dfsg.1-1ubuntu0.1~esm1 | Apr 14, 2022 |