CVE-2018-14352
Fixed in a distro release EPSS 4%
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in imap/util.c does not leave room for quote characters, leading to a stack-based buffer overflow.
Products: mutt, neomutt, canonical ubuntu_linux, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.5 | mutt | 1.10.1-r0 |
| Alpine 3.6 | mutt | 1.10.1-r0 |
| Alpine 3.7 | mutt | 1.10.1-r0 |
| Alpine 3.8 | mutt | 1.10.1-r0 |
| Arch Linux | neomutt | 20180716-1 |
| Debian 12 | mutt | 1.10.1-1 |
| Debian 12 | neomutt | 20180716+dfsg.1-1 |
| Debian 13 | mutt | 1.10.1-1 |
| Debian 13 | neomutt | 20180716+dfsg.1-1 |
| Debian 14 | mutt | 1.10.1-1 |
| Debian 14 | neomutt | 20180716+dfsg.1-1 |
| Debian 8 | mutt | 1.5.23-3+deb8u1 |
| Debian 9 | mutt | 1.7.2-1+deb9u1 |
| SUSE Linux Enterprise Desktop 12 SP3 | mutt | 1.10.1-55.6.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | mutt | 1.10.1-55.3.1 |
| SUSE Linux Enterprise Module for Basesystem 15 | mutt | 1.10.1-3.3.4 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | mutt | 1.5.17-42.43.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | mutt | 1.5.17-42.43.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | mutt | 1.5.17-42.43.1 |
| SUSE Linux Enterprise Server 11 SP4 | mutt | 1.5.17-42.43.1 |
| SUSE Linux Enterprise Server 12 SP3 | mutt | 1.10.1-55.3.1 |
| SUSE Linux Enterprise Server 12 SP3 | mutt | 1.10.1-55.6.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | mutt | 1.5.17-42.43.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | mutt | 1.10.1-55.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | mutt | 1.10.1-55.6.1 |
| Ubuntu 14.04 LTS | mutt | 1.5.21-6.4ubuntu2.2 |
| Ubuntu 16.04 LTS | mutt | 1.5.24-1ubuntu0.2 |
| Ubuntu 16.04 LTS | mutt | 1.5.24-1ubuntu0.1 |
| Ubuntu 18.04 LTS | mutt | 1.9.4-3ubuntu0.1 |
| Ubuntu Pro 18.04 LTS | neomutt | 20171215+dfsg.1-1ubuntu0.1~esm1 |
| Ubuntu Pro 20.04 LTS | neomutt | 20191207+dfsg.1-1.1ubuntu0.1~esm1 |
| Ubuntu Pro 22.04 LTS | neomutt | 20211029+dfsg1-1ubuntu0.1~esm1 |
| Ubuntu Pro 24.04 LTS | neomutt | 20231103+dfsg1-1ubuntu0.1~esm1 |
| openSUSE Tumbleweed | mutt | 2.0.7-2.2 |
| openSUSE Tumbleweed | neomutt | 20210205-3.3 |