CVE-2018-14355

mutt: An issue was discovered in Mutt before 1.10.1 and NeoMutt before2018-07-16

CVE-2018-14355 is fixed in 2 products on 1 platform, first by mutt 1.9.4-3ubuntu0.1, released July 16, 2018. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0323
88th percentile

An issue was discovered in Mutt before 1.10.1 and NeoMutt before2018-07-16. imap/util.c mishandles ".." directory traversal in a mailboxname.

Where it's fixed

ProductFixed inFixReleased
Linux
mutt · Ubuntu 18.04.6 LTS (bionic) 1.9.4-3ubuntu0.1 mutt 1.9.4-3ubuntu0.1 Jul 16, 2018
mutt · Ubuntu 24.10 (oracular) 1.10.1-1 mutt 1.10.1-1 Jul 17, 2018
neomutt · Ubuntu 18.04.6 LTS (bionic) 20171215+dfsg.1-1ubuntu0.1~esm1 neomutt 20171215+dfsg.1-1ubuntu0.1~esm1 Apr 14, 2022