CVE-2018-14357
Fixed in a distro release EPSS 5%
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with an automatic subscription.
Products: mutt, neomutt, canonical ubuntu_linux, debian_linux, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_eus, redhat enterprise_linux_server_tus, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.5 | mutt | 1.10.1-r0 |
| Alpine 3.6 | mutt | 1.10.1-r0 |
| Alpine 3.7 | mutt | 1.10.1-r0 |
| Alpine 3.8 | mutt | 1.10.1-r0 |
| Amazon Linux 2 | mutt | 5:1.5.21-28.amzn2 |
| Arch Linux | neomutt | 20180716-1 |
| Debian 12 | mutt | 1.10.1-1 |
| Debian 12 | neomutt | 20180716+dfsg.1-1 |
| Debian 13 | mutt | 1.10.1-1 |
| Debian 13 | neomutt | 20180716+dfsg.1-1 |
| Debian 14 | mutt | 1.10.1-1 |
| Debian 14 | neomutt | 20180716+dfsg.1-1 |
| Debian 8 | mutt | 1.5.23-3+deb8u1 |
| Debian 9 | mutt | 1.7.2-1+deb9u1 |
| Red Hat Enterprise Linux 6 | mutt | 5:1.5.20-9.20091214hg736b6a.el6 |
| Red Hat Enterprise Linux 6 | mutt-debuginfo | 5:1.5.20-9.20091214hg736b6a.el6 |
| Red Hat Enterprise Linux 7 | mutt | 5:1.5.21-28.el7_5 |
| Red Hat Enterprise Linux 7 | mutt-debuginfo | 5:1.5.21-28.el7_5 |
| SUSE Linux Enterprise Desktop 12 SP3 | mutt | 1.10.1-55.3.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | mutt | 1.10.1-55.6.1 |
| SUSE Linux Enterprise Module for Basesystem 15 | mutt | 1.10.1-3.3.4 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | mutt | 1.5.17-42.43.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | mutt | 1.5.17-42.43.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | mutt | 1.5.17-42.43.1 |
| SUSE Linux Enterprise Server 11 SP4 | mutt | 1.5.17-42.43.1 |
| SUSE Linux Enterprise Server 12 SP3 | mutt | 1.10.1-55.6.1 |
| SUSE Linux Enterprise Server 12 SP3 | mutt | 1.10.1-55.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | mutt | 1.5.17-42.43.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | mutt | 1.10.1-55.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | mutt | 1.10.1-55.6.1 |
| Ubuntu 14.04 LTS | mutt | 1.5.21-6.4ubuntu2.2 |
| Ubuntu 16.04 LTS | mutt | 1.5.24-1ubuntu0.1 |
| Ubuntu 16.04 LTS | mutt | 1.5.24-1ubuntu0.2 |
| Ubuntu 18.04 LTS | mutt | 1.9.4-3ubuntu0.1 |
| Ubuntu Pro 18.04 LTS | neomutt | 20171215+dfsg.1-1ubuntu0.1~esm1 |
| Ubuntu Pro 20.04 LTS | neomutt | 20191207+dfsg.1-1.1ubuntu0.1~esm1 |
| Ubuntu Pro 22.04 LTS | neomutt | 20211029+dfsg1-1ubuntu0.1~esm1 |
| Ubuntu Pro 24.04 LTS | neomutt | 20231103+dfsg1-1ubuntu0.1~esm1 |
| openSUSE Tumbleweed | mutt | 2.0.7-2.2 |
| openSUSE Tumbleweed | neomutt | 20210205-3.3 |