MU
Product
mutt
52
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 12High 0Medium 13Low 7
Watch
Add mutt to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-14362 | 9.8 | Jul 17 | An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16 Affected: before 1.10.1 |
| CVE-2018-14359 | 9.8 | Jul 17 | An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16 Affected: before 1.10.1 |
| CVE-2018-14358 | 9.8 | Jul 17 | An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16 Affected: before 1.10.1 |
| CVE-2018-14357 | 9.8 | Jul 17 | An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16 Affected: before 1.10.1 |
| CVE-2018-14356 | 9.8 | Jul 17 | An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16 Affected: before 1.10.1 |
| CVE-2018-14354 | 9.8 | Jul 17 | An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16 Affected: before 1.10.1 |
| CVE-2018-14353 | 9.8 | Jul 17 | An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16 Affected: before 1.10.1 |
| CVE-2018-14352 | 9.8 | Jul 17 | An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16 Affected: before 1.10.1 |
| CVE-2018-14351 | 9.8 | Jul 17 | An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16 Affected: before 1.10.1 |
| CVE-2018-14350 | 9.8 | Jul 17 | An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16 Affected: before 1.10.1 |
| CVE-2018-14349 | 9.8 | Jul 17 | An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16 Affected: before 1.10.1 |
| CVE-2021-32055 | 9.1 | May 5 | Mutt 1.11.0 through 2.0.x before 2.0.7 (and NeoMutt 2019-10-25 through 2021-05-04) has a $imap_qresync issue in which imap/util.c has an out-of-bounds read in situations where an… Affected: 1.11.0 before 2.0.7 |
| CVE-2024-49393 | 6.5 | Nov 12 | In neomutt and mutt, the To and Cc email headers are not validated by cryptographic signing which allows an attacker that intercepts a message to change their value and include… Affected: All versions, or not specified |
| CVE-2023-4874 | 6.5 | Sep 9 | Null pointer dereference when viewing a specially crafted email in Mutt >1.5.2 <2.2.12 Affected: after 1.5.2 before 2.2.12 |
| CVE-2021-3181 | 6.5 | Jan 19 | rfc822.c in Mutt through 2.0.4 allows remote attackers to cause a denial of service (mailbox unavailability) by sending email messages with sequences of semicolon characters in… Affected: through 2.0.4 |
| CVE-2020-14954 | 5.9 | Jun 21 | Mutt before 1.14.4 and NeoMutt before 2020-06-19 have a STARTTLS buffering issue that affects IMAP, SMTP, and POP3 Affected: before 1.14.4 |
| CVE-2020-14093 | 5.9 | Jun 15 | Mutt before 1.14.3 allows an IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response Affected: before 1.14.3 |
| CVE-2023-4875 | 5.7 | Sep 9 | Null pointer dereference when composing from a specially crafted draft message in Mutt >1.5.2 <2.2.12 Affected: after 1.5.2 before 2.2.12 |
| CVE-2005-2351 | 5.5 | Nov 1 | Mutt before 1.5.20 patch 7 allows an attacker to cause a denial of service via a series of requests to mutt temporary files Affected: through 1.5.20 |
| CVE-2024-49395 | 5.3 | Nov 12 | In mutt and neomutt, PGP encryption does not use the --hidden-recipient mode which may leak the Bcc email header field by inferring from the recipients info Affected: All versions, or not specified |
| CVE-2024-49394 | 5.3 | Nov 12 | In mutt and neomutt the In-Reply-To email header field is not protected by cryptographic signing which allows an attacker to reuse an unencrypted but signed email message to… Affected: All versions, or not specified |
| CVE-2022-1328 | 5.3 | Apr 14 | Buffer Overflow in uudecoder in Mutt affecting all versions starting from 0.94.13 before 2.2.3 allows read past end of input line Affected: 0.94.13 before 2.2.3 |
| CVE-2020-28896 | 5.3 | Nov 23 | Mutt before 2.0.2 and NeoMutt before 2020-11-20 did not ensure that $ssl_force_tls was processed if an IMAP server's initial server response was invalid Affected: before 2.0.2 |
| CVE-2018-14355 | 5.3 | Jul 17 | An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16 Affected: before 1.10.1 |
| CVE-2020-14154 | 4.8 | Jun 15 | Mutt before 1.14.3 proceeds with a connection even if, in response to a GnuTLS certificate prompt, the user rejects an expired intermediate certificate Affected: before 1.14.3 |
| CVE-2026-43863 | 3.7 | May 4 | mutt before 2.3.2 has an infinite loop in data_object_to_stream in crypt-gpgme.c Affected: before 2.3.2 |
| CVE-2026-43862 | 3.7 | May 4 | In mutt before 2.3.2, the imap_auth_gss security level is mishandled Affected: before 2.3.2 |
| CVE-2026-43861 | 3.7 | May 4 | mutt before 2.3.2 does not check for '\0' in url_pct_decode Affected: before 2.3.2 |
| CVE-2026-43860 | 3.7 | May 4 | mutt before 2.3.2 sometimes truncates the hash_passwd by one byte for IMAP auth_cram MD5 digest Affected: before 2.3.2 |
| CVE-2026-43859 | 3.7 | May 4 | mutt before 2.3.2 sometimes uses strfcpy instead of memcpy for the IMAP auth_cram MD5 digest Affected: before 2.3.2 |
| CVE-2026-107570 | 2.5 | Oct 8 | Use of Out-of-range Pointer Offset in mutt Affected: through 2.4.2 |
| CVE-2026-43864 | 2.5 | May 4 | mutt before 2.3.2 has a show_sig_summary NULL pointer dereference Affected: before 2.3.2 |
| CVE-2014-9116 | – | Dec 2 | The write_one_header function in mutt 1.5.23 does not properly handle newline characters at the beginning of a header, which allows remote attackers to cause a denial of service… Affected: 1.5.23 |
| CVE-2014-0467 | – | Mar 14 | Buffer overflow in copy.c in Mutt before 1.5.23 allows remote attackers to cause a denial of service (crash) via a crafted RFC2047 header line, related to address expansion Affected: through 1.5.22; 1.5; 1.5.1; 1.5.2; 1.5.3; 1.5.4; +17 more |
| CVE-2011-1429 | – | Mar 16 | Mutt does not verify that the smtps server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof an SSL SMTP… Affected: All versions, or not specified |
| CVE-2009-3766 | – | Oct 23 | mutt_ssl.c in mutt 1.5.16 and other versions before 1.5.19, when OpenSSL is used, does not verify the domain name in the subject's Common Name (CN) field of an X.509 certificate,… Affected: 1.5.16 before 1.5.19 |
| CVE-2009-3765 | – | Oct 23 | mutt_ssl.c in mutt 1.5.19 and 1.5.20, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509… Affected: 1.5.19; 1.5.20 |
| CVE-2009-1390 | – | Jun 16 | Mutt 1.5.19, when linked against (1) OpenSSL (mutt_ssl.c) or (2) GnuTLS (mutt_ssl_gnutls.c), allows connections when only one TLS certificate in the chain is accepted instead of… Affected: 1.5.19 |
| CVE-2007-2683 | – | May 15 | Buffer overflow in Mutt 1.4.2 might allow local users to execute arbitrary code via "&" characters in the GECOS field, which triggers the overflow during alias expansion Affected: 1.4.2 |
| CVE-2007-1268 | – | Mar 6 | Mutt 1.5.13 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents Mutt from visually distinguishing between signed and unsigned portions… Affected: through 1.5.13 |
| CVE-2006-5298 | – | Oct 16 | The mutt_adv_mktemp function in the Mutt mail client 1.5.12 and earlier does not properly verify that temporary files have been created with restricted permissions, which might… Affected: through 1.5.12; 0.95.6; 1.2.1; 1.2.5; 1.2.5.1; 1.2.5.4; +18 more |
| CVE-2006-5297 | – | Oct 16 | Race condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when creating temporary files in an NFS filesystem, allows local users to overwrite arbitrary… Affected: through 1.5.12; 0.95.6; 1.2.1; 1.2.5; 1.2.5.1; 1.2.5.4; +18 more |
| CVE-2006-3242 | – | Jun 27 | Stack-based buffer overflow in the browse_get_namespace function in imap/browse.c of Mutt 1.4.2.1 and earlier allows remote attackers to cause a denial of service (crash) or… Affected: 1.4.2; 1.4.2.1 |
| CVE-2005-2642 | – | Aug 23 | Buffer overflow in the mutt_decode_xbit function in Handler.c for Mutt 1.5.10 allows remote attackers to execute arbitrary code, possibly due to interactions with libiconv or… Affected: 1.5.10 |
| CVE-2004-0078 | – | Mar 3 | Buffer overflow in the index menu code (menu_pad_string of menu.c) for Mutt 1.4.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute… Affected: 1.2.1; 1.2.5; 1.2.5.1; 1.2.5.4; 1.2.5.5; 1.2.5.12; +12 more |
| CVE-2003-0300 | – | Jun 16 | The IMAP Client for Sylpheed 0.8.11 allows remote malicious IMAP servers to cause a denial of service (crash) via certain large literal size values that cause either integer… Affected: 1.4.1 |
| CVE-2003-0299 | – | Jun 16 | The IMAP Client, as used in mutt 1.4.1 and Balsa 2.0.10, allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large… Affected: 1.4.1 |
| CVE-2003-0167 | – | Apr 2 | Multiple off-by-one buffer overflows in the IMAP capability for Mutt 1.3.28 and earlier, and Balsa 1.2.4 and earlier, allow a remote malicious IMAP server to cause a denial of… Affected: 1.3.12; 1.3.12.1; 1.3.16; 1.3.17; 1.3.22; 1.3.24; +3 more |
| CVE-2003-0140 | – | Mar 24 | Buffer overflow in Mutt 1.4.0 and possibly earlier versions, 1.5.x up to 1.5.3, and other programs that use Mutt code such as Balsa before 2.0.10, allows a remote malicious IMAP… Affected: 1.3.12; 1.3.16; 1.3.17; 1.3.22; 1.3.24; 1.3.25; +3 more |
| CVE-2002-0001 | – | Feb 27 | Vulnerability in RFC822 address parser in mutt before 1.2.5.1 and mutt 1.3.x before 1.3.25 allows remote attackers to execute arbitrary commands via an improperly terminated… Affected: through 1.2.5.1; through 1.3.25 |