csaf_suse - suse-su-2018:2403-1

Vulnerability from csaf_suse

Published

2018-08-17 06:54

Modified

2018-08-17 06:54

Summary

Security update for mutt

Notes

Title of the patch

Security update for mutt

Description of the patch

This update for mutt fixes the following issues: Security issues fixed: - CVE-2018-14352: Fix imap_quote_string in imap/util.c that does not leave room for quote characters (bsc#1101582). - CVE-2018-14353: Fix imap_quote_string in imap/util.c that has an integer underflow (bsc#1101581). - CVE-2018-14362: Fix pop.c that does not forbid characters that may have unsafe interaction with message-cache pathnames (bsc#1101567). - CVE-2018-14354: Fix arbitrary command execution from remote IMAP servers via backquote characters (bsc#1101578). - CVE-2018-14356: Fix pop.c that mishandles a zero-length UID (bsc#1101576). - CVE-2018-14355: Fix imap/util.c that mishandles '..' directory traversal in a mailbox name (bsc#1101577). - CVE-2018-14349: Fix imap/command.c that mishandles a NO response without a message (bsc#1101589). - CVE-2018-14350: Fix imap/message.c that has a stack-based buffer overflow for a FETCH response with along INTERNALDATE field (bsc#1101588). - CVE-2018-14357: Fix that remote IMAP servers are allowed to execute arbitrary commands via backquote characters (bsc#1101573). - CVE-2018-14359: Fix buffer overflow via base64 data (bsc#1101570). - CVE-2018-14358: Fix imap/message.c that has a stack-based buffer overflow for a FETCH response with along RFC822.SIZE field (bsc#1101571). Bug fixes: - bsc#936807: On entering a 70 character subject line in mutt, a tab is added to the text after 67 characters.

Patchnames

sleposp3-mutt-13736,slessp3-mutt-13736,slessp4-mutt-13736

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
   document: {
      aggregate_severity: {
         namespace: "https://www.suse.com/support/security/rating/",
         text: "important",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright 2024 SUSE LLC. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "Security update for mutt",
            title: "Title of the patch",
         },
         {
            category: "description",
            text: "This update for mutt fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-14352: Fix imap_quote_string in imap/util.c that does not leave room for quote characters (bsc#1101582).\n- CVE-2018-14353: Fix imap_quote_string in imap/util.c that has an integer underflow (bsc#1101581).\n- CVE-2018-14362: Fix pop.c that does not forbid characters that may have unsafe interaction with message-cache pathnames (bsc#1101567).\n- CVE-2018-14354: Fix arbitrary command execution from remote IMAP servers via backquote characters (bsc#1101578).\n- CVE-2018-14356: Fix pop.c that mishandles a zero-length UID (bsc#1101576).\n- CVE-2018-14355: Fix imap/util.c that mishandles '..' directory traversal in a mailbox name (bsc#1101577).\n- CVE-2018-14349: Fix imap/command.c that mishandles a NO response without a message (bsc#1101589).\n- CVE-2018-14350: Fix imap/message.c that has a stack-based buffer overflow for a FETCH response with along INTERNALDATE field (bsc#1101588).\n- CVE-2018-14357: Fix that remote IMAP servers are allowed to execute arbitrary commands via backquote characters (bsc#1101573).\n- CVE-2018-14359: Fix buffer overflow via base64 data (bsc#1101570).\n- CVE-2018-14358: Fix imap/message.c that has a stack-based buffer overflow for a FETCH response with along RFC822.SIZE field (bsc#1101571).\n\n\nBug fixes:\n\n- bsc#936807: On entering a 70 character subject line in mutt, a tab is added to the text after 67 characters.\n",
            title: "Description of the patch",
         },
         {
            category: "details",
            text: "sleposp3-mutt-13736,slessp3-mutt-13736,slessp4-mutt-13736",
            title: "Patchnames",
         },
         {
            category: "legal_disclaimer",
            text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
            title: "Terms of use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://www.suse.com/support/security/contact/",
         name: "SUSE Product Security Team",
         namespace: "https://www.suse.com/",
      },
      references: [
         {
            category: "external",
            summary: "SUSE ratings",
            url: "https://www.suse.com/support/security/rating/",
         },
         {
            category: "self",
            summary: "URL of this CSAF notice",
            url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2018_2403-1.json",
         },
         {
            category: "self",
            summary: "URL for SUSE-SU-2018:2403-1",
            url: "https://www.suse.com/support/update/announcement/2018/suse-su-20182403-1/",
         },
         {
            category: "self",
            summary: "E-Mail link for SUSE-SU-2018:2403-1",
            url: "https://lists.suse.com/pipermail/sle-security-updates/2018-August/004462.html",
         },
         {
            category: "self",
            summary: "SUSE Bug 1101567",
            url: "https://bugzilla.suse.com/1101567",
         },
         {
            category: "self",
            summary: "SUSE Bug 1101570",
            url: "https://bugzilla.suse.com/1101570",
         },
         {
            category: "self",
            summary: "SUSE Bug 1101571",
            url: "https://bugzilla.suse.com/1101571",
         },
         {
            category: "self",
            summary: "SUSE Bug 1101573",
            url: "https://bugzilla.suse.com/1101573",
         },
         {
            category: "self",
            summary: "SUSE Bug 1101576",
            url: "https://bugzilla.suse.com/1101576",
         },
         {
            category: "self",
            summary: "SUSE Bug 1101577",
            url: "https://bugzilla.suse.com/1101577",
         },
         {
            category: "self",
            summary: "SUSE Bug 1101578",
            url: "https://bugzilla.suse.com/1101578",
         },
         {
            category: "self",
            summary: "SUSE Bug 1101581",
            url: "https://bugzilla.suse.com/1101581",
         },
         {
            category: "self",
            summary: "SUSE Bug 1101582",
            url: "https://bugzilla.suse.com/1101582",
         },
         {
            category: "self",
            summary: "SUSE Bug 1101588",
            url: "https://bugzilla.suse.com/1101588",
         },
         {
            category: "self",
            summary: "SUSE Bug 1101589",
            url: "https://bugzilla.suse.com/1101589",
         },
         {
            category: "self",
            summary: "SUSE Bug 936807",
            url: "https://bugzilla.suse.com/936807",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2018-14349 page",
            url: "https://www.suse.com/security/cve/CVE-2018-14349/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2018-14350 page",
            url: "https://www.suse.com/security/cve/CVE-2018-14350/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2018-14352 page",
            url: "https://www.suse.com/security/cve/CVE-2018-14352/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2018-14353 page",
            url: "https://www.suse.com/security/cve/CVE-2018-14353/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2018-14354 page",
            url: "https://www.suse.com/security/cve/CVE-2018-14354/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2018-14355 page",
            url: "https://www.suse.com/security/cve/CVE-2018-14355/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2018-14356 page",
            url: "https://www.suse.com/security/cve/CVE-2018-14356/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2018-14357 page",
            url: "https://www.suse.com/security/cve/CVE-2018-14357/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2018-14358 page",
            url: "https://www.suse.com/security/cve/CVE-2018-14358/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2018-14359 page",
            url: "https://www.suse.com/security/cve/CVE-2018-14359/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2018-14362 page",
            url: "https://www.suse.com/security/cve/CVE-2018-14362/",
         },
      ],
      title: "Security update for mutt",
      tracking: {
         current_release_date: "2018-08-17T06:54:36Z",
         generator: {
            date: "2018-08-17T06:54:36Z",
            engine: {
               name: "cve-database.git:bin/generate-csaf.pl",
               version: "1",
            },
         },
         id: "SUSE-SU-2018:2403-1",
         initial_release_date: "2018-08-17T06:54:36Z",
         revision_history: [
            {
               date: "2018-08-17T06:54:36Z",
               number: "1",
               summary: "Current version",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "mutt-1.5.17-42.43.1.i586",
                        product: {
                           name: "mutt-1.5.17-42.43.1.i586",
                           product_id: "mutt-1.5.17-42.43.1.i586",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "i586",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "mutt-1.5.17-42.43.1.ia64",
                        product: {
                           name: "mutt-1.5.17-42.43.1.ia64",
                           product_id: "mutt-1.5.17-42.43.1.ia64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "ia64",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "mutt-1.5.17-42.43.1.ppc64",
                        product: {
                           name: "mutt-1.5.17-42.43.1.ppc64",
                           product_id: "mutt-1.5.17-42.43.1.ppc64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "ppc64",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "mutt-1.5.17-42.43.1.s390x",
                        product: {
                           name: "mutt-1.5.17-42.43.1.s390x",
                           product_id: "mutt-1.5.17-42.43.1.s390x",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "s390x",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "mutt-1.5.17-42.43.1.x86_64",
                        product: {
                           name: "mutt-1.5.17-42.43.1.x86_64",
                           product_id: "mutt-1.5.17-42.43.1.x86_64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Point of Sale 11 SP3",
                        product: {
                           name: "SUSE Linux Enterprise Point of Sale 11 SP3",
                           product_id: "SUSE Linux Enterprise Point of Sale 11 SP3",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle-pos:11:sp3",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server 11 SP3-LTSS",
                        product: {
                           name: "SUSE Linux Enterprise Server 11 SP3-LTSS",
                           product_id: "SUSE Linux Enterprise Server 11 SP3-LTSS",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:suse_sles_ltss:11:sp3",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server 11 SP3-TERADATA",
                        product: {
                           name: "SUSE Linux Enterprise Server 11 SP3-TERADATA",
                           product_id: "SUSE Linux Enterprise Server 11 SP3-TERADATA",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles:11:sp3:teradata",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server 11 SP4",
                        product: {
                           name: "SUSE Linux Enterprise Server 11 SP4",
                           product_id: "SUSE Linux Enterprise Server 11 SP4",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:suse_sles:11:sp4",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
                        product: {
                           name: "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
                           product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles_sap:11:sp4",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "SUSE Linux Enterprise",
               },
            ],
            category: "vendor",
            name: "SUSE",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "mutt-1.5.17-42.43.1.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
               product_id: "SUSE Linux Enterprise Point of Sale 11 SP3:mutt-1.5.17-42.43.1.i586",
            },
            product_reference: "mutt-1.5.17-42.43.1.i586",
            relates_to_product_reference: "SUSE Linux Enterprise Point of Sale 11 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "mutt-1.5.17-42.43.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
               product_id: "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.i586",
            },
            product_reference: "mutt-1.5.17-42.43.1.i586",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP3-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "mutt-1.5.17-42.43.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
               product_id: "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.s390x",
            },
            product_reference: "mutt-1.5.17-42.43.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP3-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "mutt-1.5.17-42.43.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
               product_id: "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.x86_64",
            },
            product_reference: "mutt-1.5.17-42.43.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP3-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "mutt-1.5.17-42.43.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
               product_id: "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.i586",
            },
            product_reference: "mutt-1.5.17-42.43.1.i586",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP3-TERADATA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "mutt-1.5.17-42.43.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
               product_id: "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.s390x",
            },
            product_reference: "mutt-1.5.17-42.43.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP3-TERADATA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "mutt-1.5.17-42.43.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
               product_id: "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.x86_64",
            },
            product_reference: "mutt-1.5.17-42.43.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP3-TERADATA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "mutt-1.5.17-42.43.1.i586 as component of SUSE Linux Enterprise Server 11 SP4",
               product_id: "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.i586",
            },
            product_reference: "mutt-1.5.17-42.43.1.i586",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "mutt-1.5.17-42.43.1.ia64 as component of SUSE Linux Enterprise Server 11 SP4",
               product_id: "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ia64",
            },
            product_reference: "mutt-1.5.17-42.43.1.ia64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "mutt-1.5.17-42.43.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
               product_id: "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ppc64",
            },
            product_reference: "mutt-1.5.17-42.43.1.ppc64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "mutt-1.5.17-42.43.1.s390x as component of SUSE Linux Enterprise Server 11 SP4",
               product_id: "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.s390x",
            },
            product_reference: "mutt-1.5.17-42.43.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "mutt-1.5.17-42.43.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
               product_id: "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.x86_64",
            },
            product_reference: "mutt-1.5.17-42.43.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "mutt-1.5.17-42.43.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.i586",
            },
            product_reference: "mutt-1.5.17-42.43.1.i586",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "mutt-1.5.17-42.43.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ia64",
            },
            product_reference: "mutt-1.5.17-42.43.1.ia64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "mutt-1.5.17-42.43.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ppc64",
            },
            product_reference: "mutt-1.5.17-42.43.1.ppc64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "mutt-1.5.17-42.43.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.s390x",
            },
            product_reference: "mutt-1.5.17-42.43.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "mutt-1.5.17-42.43.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.x86_64",
            },
            product_reference: "mutt-1.5.17-42.43.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2018-14349",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2018-14349",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/command.c mishandles a NO response without a message.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Point of Sale 11 SP3:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.s390x",
               "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.s390x",
               "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2018-14349",
               url: "https://www.suse.com/security/cve/CVE-2018-14349",
            },
            {
               category: "external",
               summary: "SUSE Bug 1101428 for CVE-2018-14349",
               url: "https://bugzilla.suse.com/1101428",
            },
            {
               category: "external",
               summary: "SUSE Bug 1101589 for CVE-2018-14349",
               url: "https://bugzilla.suse.com/1101589",
            },
            {
               category: "external",
               summary: "SUSE Bug 1101593 for CVE-2018-14349",
               url: "https://bugzilla.suse.com/1101593",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Point of Sale 11 SP3:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Point of Sale 11 SP3:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2018-08-17T06:54:36Z",
               details: "moderate",
            },
         ],
         title: "CVE-2018-14349",
      },
      {
         cve: "CVE-2018-14350",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2018-14350",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer overflow for a FETCH response with a long INTERNALDATE field.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Point of Sale 11 SP3:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.s390x",
               "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.s390x",
               "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2018-14350",
               url: "https://www.suse.com/security/cve/CVE-2018-14350",
            },
            {
               category: "external",
               summary: "SUSE Bug 1101428 for CVE-2018-14350",
               url: "https://bugzilla.suse.com/1101428",
            },
            {
               category: "external",
               summary: "SUSE Bug 1101588 for CVE-2018-14350",
               url: "https://bugzilla.suse.com/1101588",
            },
            {
               category: "external",
               summary: "SUSE Bug 1101593 for CVE-2018-14350",
               url: "https://bugzilla.suse.com/1101593",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Point of Sale 11 SP3:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Point of Sale 11 SP3:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2018-08-17T06:54:36Z",
               details: "moderate",
            },
         ],
         title: "CVE-2018-14350",
      },
      {
         cve: "CVE-2018-14352",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2018-14352",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in imap/util.c does not leave room for quote characters, leading to a stack-based buffer overflow.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Point of Sale 11 SP3:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.s390x",
               "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.s390x",
               "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2018-14352",
               url: "https://www.suse.com/security/cve/CVE-2018-14352",
            },
            {
               category: "external",
               summary: "SUSE Bug 1101428 for CVE-2018-14352",
               url: "https://bugzilla.suse.com/1101428",
            },
            {
               category: "external",
               summary: "SUSE Bug 1101582 for CVE-2018-14352",
               url: "https://bugzilla.suse.com/1101582",
            },
            {
               category: "external",
               summary: "SUSE Bug 1101593 for CVE-2018-14352",
               url: "https://bugzilla.suse.com/1101593",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Point of Sale 11 SP3:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Point of Sale 11 SP3:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2018-08-17T06:54:36Z",
               details: "moderate",
            },
         ],
         title: "CVE-2018-14352",
      },
      {
         cve: "CVE-2018-14353",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2018-14353",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in imap/util.c has an integer underflow.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Point of Sale 11 SP3:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.s390x",
               "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.s390x",
               "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2018-14353",
               url: "https://www.suse.com/security/cve/CVE-2018-14353",
            },
            {
               category: "external",
               summary: "SUSE Bug 1101428 for CVE-2018-14353",
               url: "https://bugzilla.suse.com/1101428",
            },
            {
               category: "external",
               summary: "SUSE Bug 1101581 for CVE-2018-14353",
               url: "https://bugzilla.suse.com/1101581",
            },
            {
               category: "external",
               summary: "SUSE Bug 1101593 for CVE-2018-14353",
               url: "https://bugzilla.suse.com/1101593",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Point of Sale 11 SP3:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Point of Sale 11 SP3:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2018-08-17T06:54:36Z",
               details: "moderate",
            },
         ],
         title: "CVE-2018-14353",
      },
      {
         cve: "CVE-2018-14354",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2018-14354",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with a manual subscription or unsubscription.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Point of Sale 11 SP3:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.s390x",
               "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.s390x",
               "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2018-14354",
               url: "https://www.suse.com/security/cve/CVE-2018-14354",
            },
            {
               category: "external",
               summary: "SUSE Bug 1101428 for CVE-2018-14354",
               url: "https://bugzilla.suse.com/1101428",
            },
            {
               category: "external",
               summary: "SUSE Bug 1101578 for CVE-2018-14354",
               url: "https://bugzilla.suse.com/1101578",
            },
            {
               category: "external",
               summary: "SUSE Bug 1101581 for CVE-2018-14354",
               url: "https://bugzilla.suse.com/1101581",
            },
            {
               category: "external",
               summary: "SUSE Bug 1101589 for CVE-2018-14354",
               url: "https://bugzilla.suse.com/1101589",
            },
            {
               category: "external",
               summary: "SUSE Bug 1101593 for CVE-2018-14354",
               url: "https://bugzilla.suse.com/1101593",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Point of Sale 11 SP3:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 9.6,
                  baseSeverity: "CRITICAL",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Point of Sale 11 SP3:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2018-08-17T06:54:36Z",
               details: "critical",
            },
         ],
         title: "CVE-2018-14354",
      },
      {
         cve: "CVE-2018-14355",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2018-14355",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/util.c mishandles \"..\" directory traversal in a mailbox name.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Point of Sale 11 SP3:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.s390x",
               "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.s390x",
               "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2018-14355",
               url: "https://www.suse.com/security/cve/CVE-2018-14355",
            },
            {
               category: "external",
               summary: "SUSE Bug 1101428 for CVE-2018-14355",
               url: "https://bugzilla.suse.com/1101428",
            },
            {
               category: "external",
               summary: "SUSE Bug 1101577 for CVE-2018-14355",
               url: "https://bugzilla.suse.com/1101577",
            },
            {
               category: "external",
               summary: "SUSE Bug 1101593 for CVE-2018-14355",
               url: "https://bugzilla.suse.com/1101593",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Point of Sale 11 SP3:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Point of Sale 11 SP3:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2018-08-17T06:54:36Z",
               details: "moderate",
            },
         ],
         title: "CVE-2018-14355",
      },
      {
         cve: "CVE-2018-14356",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2018-14356",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c mishandles a zero-length UID.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Point of Sale 11 SP3:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.s390x",
               "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.s390x",
               "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2018-14356",
               url: "https://www.suse.com/security/cve/CVE-2018-14356",
            },
            {
               category: "external",
               summary: "SUSE Bug 1101428 for CVE-2018-14356",
               url: "https://bugzilla.suse.com/1101428",
            },
            {
               category: "external",
               summary: "SUSE Bug 1101576 for CVE-2018-14356",
               url: "https://bugzilla.suse.com/1101576",
            },
            {
               category: "external",
               summary: "SUSE Bug 1101589 for CVE-2018-14356",
               url: "https://bugzilla.suse.com/1101589",
            },
            {
               category: "external",
               summary: "SUSE Bug 1101593 for CVE-2018-14356",
               url: "https://bugzilla.suse.com/1101593",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Point of Sale 11 SP3:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Point of Sale 11 SP3:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2018-08-17T06:54:36Z",
               details: "moderate",
            },
         ],
         title: "CVE-2018-14356",
      },
      {
         cve: "CVE-2018-14357",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2018-14357",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with an automatic subscription.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Point of Sale 11 SP3:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.s390x",
               "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.s390x",
               "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2018-14357",
               url: "https://www.suse.com/security/cve/CVE-2018-14357",
            },
            {
               category: "external",
               summary: "SUSE Bug 1101428 for CVE-2018-14357",
               url: "https://bugzilla.suse.com/1101428",
            },
            {
               category: "external",
               summary: "SUSE Bug 1101573 for CVE-2018-14357",
               url: "https://bugzilla.suse.com/1101573",
            },
            {
               category: "external",
               summary: "SUSE Bug 1101581 for CVE-2018-14357",
               url: "https://bugzilla.suse.com/1101581",
            },
            {
               category: "external",
               summary: "SUSE Bug 1101589 for CVE-2018-14357",
               url: "https://bugzilla.suse.com/1101589",
            },
            {
               category: "external",
               summary: "SUSE Bug 1101593 for CVE-2018-14357",
               url: "https://bugzilla.suse.com/1101593",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Point of Sale 11 SP3:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.1,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Point of Sale 11 SP3:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2018-08-17T06:54:36Z",
               details: "important",
            },
         ],
         title: "CVE-2018-14357",
      },
      {
         cve: "CVE-2018-14358",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2018-14358",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer overflow for a FETCH response with a long RFC822.SIZE field.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Point of Sale 11 SP3:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.s390x",
               "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.s390x",
               "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2018-14358",
               url: "https://www.suse.com/security/cve/CVE-2018-14358",
            },
            {
               category: "external",
               summary: "SUSE Bug 1101428 for CVE-2018-14358",
               url: "https://bugzilla.suse.com/1101428",
            },
            {
               category: "external",
               summary: "SUSE Bug 1101571 for CVE-2018-14358",
               url: "https://bugzilla.suse.com/1101571",
            },
            {
               category: "external",
               summary: "SUSE Bug 1101593 for CVE-2018-14358",
               url: "https://bugzilla.suse.com/1101593",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Point of Sale 11 SP3:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Point of Sale 11 SP3:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2018-08-17T06:54:36Z",
               details: "moderate",
            },
         ],
         title: "CVE-2018-14358",
      },
      {
         cve: "CVE-2018-14359",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2018-14359",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They have a buffer overflow via base64 data.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Point of Sale 11 SP3:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.s390x",
               "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.s390x",
               "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2018-14359",
               url: "https://www.suse.com/security/cve/CVE-2018-14359",
            },
            {
               category: "external",
               summary: "SUSE Bug 1101428 for CVE-2018-14359",
               url: "https://bugzilla.suse.com/1101428",
            },
            {
               category: "external",
               summary: "SUSE Bug 1101570 for CVE-2018-14359",
               url: "https://bugzilla.suse.com/1101570",
            },
            {
               category: "external",
               summary: "SUSE Bug 1101589 for CVE-2018-14359",
               url: "https://bugzilla.suse.com/1101589",
            },
            {
               category: "external",
               summary: "SUSE Bug 1101593 for CVE-2018-14359",
               url: "https://bugzilla.suse.com/1101593",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Point of Sale 11 SP3:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Point of Sale 11 SP3:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2018-08-17T06:54:36Z",
               details: "moderate",
            },
         ],
         title: "CVE-2018-14359",
      },
      {
         cve: "CVE-2018-14362",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2018-14362",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not forbid characters that may have unsafe interaction with message-cache pathnames, as demonstrated by a '/' character.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Point of Sale 11 SP3:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.s390x",
               "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.s390x",
               "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ia64",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ppc64",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.s390x",
               "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.i586",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ia64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ppc64",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2018-14362",
               url: "https://www.suse.com/security/cve/CVE-2018-14362",
            },
            {
               category: "external",
               summary: "SUSE Bug 1101428 for CVE-2018-14362",
               url: "https://bugzilla.suse.com/1101428",
            },
            {
               category: "external",
               summary: "SUSE Bug 1101567 for CVE-2018-14362",
               url: "https://bugzilla.suse.com/1101567",
            },
            {
               category: "external",
               summary: "SUSE Bug 1101589 for CVE-2018-14362",
               url: "https://bugzilla.suse.com/1101589",
            },
            {
               category: "external",
               summary: "SUSE Bug 1101593 for CVE-2018-14362",
               url: "https://bugzilla.suse.com/1101593",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Point of Sale 11 SP3:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.1,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Point of Sale 11 SP3:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP3-LTSS:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP3-TERADATA:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ia64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.ppc64",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP4:mutt-1.5.17-42.43.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.i586",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ia64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.ppc64",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 11 SP4:mutt-1.5.17-42.43.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2018-08-17T06:54:36Z",
               details: "moderate",
            },
         ],
         title: "CVE-2018-14362",
      },
   ],
}

cve-2018-14359

Vulnerability from cvelistv5

Published

2018-07-17 17:00

Modified

2024-08-05 09:29

Severity ?

Summary

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They have a buffer overflow via base64 data.

References

▼	URL	Tags
	https://usn.ubuntu.com/3719-3/	vendor-advisory, x_refsource_UBUNTU
	https://gitlab.com/muttmua/mutt/commit/3d9028fec8f4d08db2251096307c0bbbebce669a	x_refsource_MISC
	https://www.debian.org/security/2018/dsa-4277	vendor-advisory, x_refsource_DEBIAN
	https://usn.ubuntu.com/3719-2/	vendor-advisory, x_refsource_UBUNTU
	https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201810-07	vendor-advisory, x_refsource_GENTOO
	http://www.mutt.org/news.html	x_refsource_MISC
	https://neomutt.org/2018/07/16/release	x_refsource_MISC
	https://usn.ubuntu.com/3719-1/	vendor-advisory, x_refsource_UBUNTU
	https://github.com/neomutt/neomutt/commit/6f163e07ae68654d7ac5268cbb7565f6df79ad85	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T09:29:50.128Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "USN-3719-3",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/3719-3/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://gitlab.com/muttmua/mutt/commit/3d9028fec8f4d08db2251096307c0bbbebce669a",
               },
               {
                  name: "DSA-4277",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2018/dsa-4277",
               },
               {
                  name: "USN-3719-2",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/3719-2/",
               },
               {
                  name: "[debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html",
               },
               {
                  name: "GLSA-201810-07",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201810-07",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://www.mutt.org/news.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://neomutt.org/2018/07/16/release",
               },
               {
                  name: "USN-3719-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/3719-1/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/neomutt/neomutt/commit/6f163e07ae68654d7ac5268cbb7565f6df79ad85",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2018-07-17T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They have a buffer overflow via base64 data.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-10-31T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "USN-3719-3",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/3719-3/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gitlab.com/muttmua/mutt/commit/3d9028fec8f4d08db2251096307c0bbbebce669a",
            },
            {
               name: "DSA-4277",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2018/dsa-4277",
            },
            {
               name: "USN-3719-2",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/3719-2/",
            },
            {
               name: "[debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html",
            },
            {
               name: "GLSA-201810-07",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201810-07",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://www.mutt.org/news.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://neomutt.org/2018/07/16/release",
            },
            {
               name: "USN-3719-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/3719-1/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/neomutt/neomutt/commit/6f163e07ae68654d7ac5268cbb7565f6df79ad85",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2018-14359",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They have a buffer overflow via base64 data.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "USN-3719-3",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/3719-3/",
                  },
                  {
                     name: "https://gitlab.com/muttmua/mutt/commit/3d9028fec8f4d08db2251096307c0bbbebce669a",
                     refsource: "MISC",
                     url: "https://gitlab.com/muttmua/mutt/commit/3d9028fec8f4d08db2251096307c0bbbebce669a",
                  },
                  {
                     name: "DSA-4277",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2018/dsa-4277",
                  },
                  {
                     name: "USN-3719-2",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/3719-2/",
                  },
                  {
                     name: "[debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html",
                  },
                  {
                     name: "GLSA-201810-07",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201810-07",
                  },
                  {
                     name: "http://www.mutt.org/news.html",
                     refsource: "MISC",
                     url: "http://www.mutt.org/news.html",
                  },
                  {
                     name: "https://neomutt.org/2018/07/16/release",
                     refsource: "MISC",
                     url: "https://neomutt.org/2018/07/16/release",
                  },
                  {
                     name: "USN-3719-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/3719-1/",
                  },
                  {
                     name: "https://github.com/neomutt/neomutt/commit/6f163e07ae68654d7ac5268cbb7565f6df79ad85",
                     refsource: "MISC",
                     url: "https://github.com/neomutt/neomutt/commit/6f163e07ae68654d7ac5268cbb7565f6df79ad85",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2018-14359",
      datePublished: "2018-07-17T17:00:00",
      dateReserved: "2018-07-17T00:00:00",
      dateUpdated: "2024-08-05T09:29:50.128Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2018-14349

Vulnerability from cvelistv5

Published

2018-07-17 17:00

Modified

2024-08-05 09:21

Severity ?

Summary

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/command.c mishandles a NO response without a message.

References

▼	URL	Tags
	https://usn.ubuntu.com/3719-3/	vendor-advisory, x_refsource_UBUNTU
	https://www.debian.org/security/2018/dsa-4277	vendor-advisory, x_refsource_DEBIAN
	https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html	mailing-list, x_refsource_MLIST
	https://gitlab.com/muttmua/mutt/commit/9347b5c01dc52682cb6be11539d9b7ebceae4416	x_refsource_MISC
	https://security.gentoo.org/glsa/201810-07	vendor-advisory, x_refsource_GENTOO
	http://www.mutt.org/news.html	x_refsource_MISC
	https://neomutt.org/2018/07/16/release	x_refsource_MISC
	https://github.com/neomutt/neomutt/commit/36a29280448097f34ce9c94606195f2ac643fed1	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T09:21:41.654Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "USN-3719-3",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/3719-3/",
               },
               {
                  name: "DSA-4277",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2018/dsa-4277",
               },
               {
                  name: "[debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://gitlab.com/muttmua/mutt/commit/9347b5c01dc52682cb6be11539d9b7ebceae4416",
               },
               {
                  name: "GLSA-201810-07",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201810-07",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://www.mutt.org/news.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://neomutt.org/2018/07/16/release",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/neomutt/neomutt/commit/36a29280448097f34ce9c94606195f2ac643fed1",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2018-07-17T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/command.c mishandles a NO response without a message.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-10-31T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "USN-3719-3",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/3719-3/",
            },
            {
               name: "DSA-4277",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2018/dsa-4277",
            },
            {
               name: "[debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gitlab.com/muttmua/mutt/commit/9347b5c01dc52682cb6be11539d9b7ebceae4416",
            },
            {
               name: "GLSA-201810-07",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201810-07",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://www.mutt.org/news.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://neomutt.org/2018/07/16/release",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/neomutt/neomutt/commit/36a29280448097f34ce9c94606195f2ac643fed1",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2018-14349",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/command.c mishandles a NO response without a message.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "USN-3719-3",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/3719-3/",
                  },
                  {
                     name: "DSA-4277",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2018/dsa-4277",
                  },
                  {
                     name: "[debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html",
                  },
                  {
                     name: "https://gitlab.com/muttmua/mutt/commit/9347b5c01dc52682cb6be11539d9b7ebceae4416",
                     refsource: "MISC",
                     url: "https://gitlab.com/muttmua/mutt/commit/9347b5c01dc52682cb6be11539d9b7ebceae4416",
                  },
                  {
                     name: "GLSA-201810-07",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201810-07",
                  },
                  {
                     name: "http://www.mutt.org/news.html",
                     refsource: "MISC",
                     url: "http://www.mutt.org/news.html",
                  },
                  {
                     name: "https://neomutt.org/2018/07/16/release",
                     refsource: "MISC",
                     url: "https://neomutt.org/2018/07/16/release",
                  },
                  {
                     name: "https://github.com/neomutt/neomutt/commit/36a29280448097f34ce9c94606195f2ac643fed1",
                     refsource: "MISC",
                     url: "https://github.com/neomutt/neomutt/commit/36a29280448097f34ce9c94606195f2ac643fed1",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2018-14349",
      datePublished: "2018-07-17T17:00:00",
      dateReserved: "2018-07-17T00:00:00",
      dateUpdated: "2024-08-05T09:21:41.654Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2018-14352

Vulnerability from cvelistv5

Published

2018-07-17 17:00

Modified

2024-08-05 09:21

Severity ?

Summary

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in imap/util.c does not leave room for quote characters, leading to a stack-based buffer overflow.

References

▼	URL	Tags
	https://usn.ubuntu.com/3719-3/	vendor-advisory, x_refsource_UBUNTU
	https://www.debian.org/security/2018/dsa-4277	vendor-advisory, x_refsource_DEBIAN
	https://gitlab.com/muttmua/mutt/commit/e0131852c6059107939893016c8ff56b6e42865d	x_refsource_MISC
	https://usn.ubuntu.com/3719-2/	vendor-advisory, x_refsource_UBUNTU
	https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201810-07	vendor-advisory, x_refsource_GENTOO
	https://github.com/neomutt/neomutt/commit/e27b65b3bf8defa34db58919496056caf3850cd4	x_refsource_MISC
	http://www.mutt.org/news.html	x_refsource_MISC
	https://neomutt.org/2018/07/16/release	x_refsource_MISC
	https://usn.ubuntu.com/3719-1/	vendor-advisory, x_refsource_UBUNTU

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T09:21:41.671Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "USN-3719-3",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/3719-3/",
               },
               {
                  name: "DSA-4277",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2018/dsa-4277",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://gitlab.com/muttmua/mutt/commit/e0131852c6059107939893016c8ff56b6e42865d",
               },
               {
                  name: "USN-3719-2",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/3719-2/",
               },
               {
                  name: "[debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html",
               },
               {
                  name: "GLSA-201810-07",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201810-07",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/neomutt/neomutt/commit/e27b65b3bf8defa34db58919496056caf3850cd4",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://www.mutt.org/news.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://neomutt.org/2018/07/16/release",
               },
               {
                  name: "USN-3719-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/3719-1/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2018-07-17T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in imap/util.c does not leave room for quote characters, leading to a stack-based buffer overflow.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-10-31T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "USN-3719-3",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/3719-3/",
            },
            {
               name: "DSA-4277",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2018/dsa-4277",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gitlab.com/muttmua/mutt/commit/e0131852c6059107939893016c8ff56b6e42865d",
            },
            {
               name: "USN-3719-2",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/3719-2/",
            },
            {
               name: "[debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html",
            },
            {
               name: "GLSA-201810-07",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201810-07",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/neomutt/neomutt/commit/e27b65b3bf8defa34db58919496056caf3850cd4",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://www.mutt.org/news.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://neomutt.org/2018/07/16/release",
            },
            {
               name: "USN-3719-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/3719-1/",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2018-14352",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in imap/util.c does not leave room for quote characters, leading to a stack-based buffer overflow.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "USN-3719-3",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/3719-3/",
                  },
                  {
                     name: "DSA-4277",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2018/dsa-4277",
                  },
                  {
                     name: "https://gitlab.com/muttmua/mutt/commit/e0131852c6059107939893016c8ff56b6e42865d",
                     refsource: "MISC",
                     url: "https://gitlab.com/muttmua/mutt/commit/e0131852c6059107939893016c8ff56b6e42865d",
                  },
                  {
                     name: "USN-3719-2",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/3719-2/",
                  },
                  {
                     name: "[debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html",
                  },
                  {
                     name: "GLSA-201810-07",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201810-07",
                  },
                  {
                     name: "https://github.com/neomutt/neomutt/commit/e27b65b3bf8defa34db58919496056caf3850cd4",
                     refsource: "MISC",
                     url: "https://github.com/neomutt/neomutt/commit/e27b65b3bf8defa34db58919496056caf3850cd4",
                  },
                  {
                     name: "http://www.mutt.org/news.html",
                     refsource: "MISC",
                     url: "http://www.mutt.org/news.html",
                  },
                  {
                     name: "https://neomutt.org/2018/07/16/release",
                     refsource: "MISC",
                     url: "https://neomutt.org/2018/07/16/release",
                  },
                  {
                     name: "USN-3719-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/3719-1/",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2018-14352",
      datePublished: "2018-07-17T17:00:00",
      dateReserved: "2018-07-17T00:00:00",
      dateUpdated: "2024-08-05T09:21:41.671Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2018-14356

Vulnerability from cvelistv5

Published

2018-07-17 17:00

Modified

2024-08-05 09:29

Severity ?

Summary

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c mishandles a zero-length UID.

References

▼	URL	Tags
	https://usn.ubuntu.com/3719-3/	vendor-advisory, x_refsource_UBUNTU
	https://github.com/neomutt/neomutt/commit/93b8ac558752d09e1c56d4f1bc82631316fa9c82	x_refsource_MISC
	https://www.debian.org/security/2018/dsa-4277	vendor-advisory, x_refsource_DEBIAN
	https://gitlab.com/muttmua/mutt/commit/e154cba1b3fc52bb8cb8aa846353c0db79b5d9c6	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201810-07	vendor-advisory, x_refsource_GENTOO
	http://www.mutt.org/news.html	x_refsource_MISC
	https://neomutt.org/2018/07/16/release	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T09:29:50.099Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "USN-3719-3",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/3719-3/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/neomutt/neomutt/commit/93b8ac558752d09e1c56d4f1bc82631316fa9c82",
               },
               {
                  name: "DSA-4277",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2018/dsa-4277",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://gitlab.com/muttmua/mutt/commit/e154cba1b3fc52bb8cb8aa846353c0db79b5d9c6",
               },
               {
                  name: "[debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html",
               },
               {
                  name: "GLSA-201810-07",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201810-07",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://www.mutt.org/news.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://neomutt.org/2018/07/16/release",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2018-07-17T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c mishandles a zero-length UID.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-10-31T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "USN-3719-3",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/3719-3/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/neomutt/neomutt/commit/93b8ac558752d09e1c56d4f1bc82631316fa9c82",
            },
            {
               name: "DSA-4277",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2018/dsa-4277",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gitlab.com/muttmua/mutt/commit/e154cba1b3fc52bb8cb8aa846353c0db79b5d9c6",
            },
            {
               name: "[debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html",
            },
            {
               name: "GLSA-201810-07",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201810-07",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://www.mutt.org/news.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://neomutt.org/2018/07/16/release",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2018-14356",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c mishandles a zero-length UID.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "USN-3719-3",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/3719-3/",
                  },
                  {
                     name: "https://github.com/neomutt/neomutt/commit/93b8ac558752d09e1c56d4f1bc82631316fa9c82",
                     refsource: "MISC",
                     url: "https://github.com/neomutt/neomutt/commit/93b8ac558752d09e1c56d4f1bc82631316fa9c82",
                  },
                  {
                     name: "DSA-4277",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2018/dsa-4277",
                  },
                  {
                     name: "https://gitlab.com/muttmua/mutt/commit/e154cba1b3fc52bb8cb8aa846353c0db79b5d9c6",
                     refsource: "MISC",
                     url: "https://gitlab.com/muttmua/mutt/commit/e154cba1b3fc52bb8cb8aa846353c0db79b5d9c6",
                  },
                  {
                     name: "[debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html",
                  },
                  {
                     name: "GLSA-201810-07",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201810-07",
                  },
                  {
                     name: "http://www.mutt.org/news.html",
                     refsource: "MISC",
                     url: "http://www.mutt.org/news.html",
                  },
                  {
                     name: "https://neomutt.org/2018/07/16/release",
                     refsource: "MISC",
                     url: "https://neomutt.org/2018/07/16/release",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2018-14356",
      datePublished: "2018-07-17T17:00:00",
      dateReserved: "2018-07-17T00:00:00",
      dateUpdated: "2024-08-05T09:29:50.099Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2018-14353

Vulnerability from cvelistv5

Published

2018-07-17 17:00

Modified

2024-08-05 09:21

Severity ?

Summary

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in imap/util.c has an integer underflow.

References

▼	URL	Tags
	https://usn.ubuntu.com/3719-3/	vendor-advisory, x_refsource_UBUNTU
	https://www.debian.org/security/2018/dsa-4277	vendor-advisory, x_refsource_DEBIAN
	https://gitlab.com/muttmua/mutt/commit/e0131852c6059107939893016c8ff56b6e42865d	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201810-07	vendor-advisory, x_refsource_GENTOO
	http://www.mutt.org/news.html	x_refsource_MISC
	https://neomutt.org/2018/07/16/release	x_refsource_MISC
	https://usn.ubuntu.com/3719-1/	vendor-advisory, x_refsource_UBUNTU
	https://github.com/neomutt/neomutt/commit/65d64a5b60a4a3883f2cd799d92c6091d8854f23	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T09:21:41.652Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "USN-3719-3",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/3719-3/",
               },
               {
                  name: "DSA-4277",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2018/dsa-4277",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://gitlab.com/muttmua/mutt/commit/e0131852c6059107939893016c8ff56b6e42865d",
               },
               {
                  name: "[debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html",
               },
               {
                  name: "GLSA-201810-07",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201810-07",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://www.mutt.org/news.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://neomutt.org/2018/07/16/release",
               },
               {
                  name: "USN-3719-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/3719-1/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/neomutt/neomutt/commit/65d64a5b60a4a3883f2cd799d92c6091d8854f23",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2018-07-17T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in imap/util.c has an integer underflow.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-10-31T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "USN-3719-3",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/3719-3/",
            },
            {
               name: "DSA-4277",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2018/dsa-4277",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gitlab.com/muttmua/mutt/commit/e0131852c6059107939893016c8ff56b6e42865d",
            },
            {
               name: "[debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html",
            },
            {
               name: "GLSA-201810-07",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201810-07",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://www.mutt.org/news.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://neomutt.org/2018/07/16/release",
            },
            {
               name: "USN-3719-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/3719-1/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/neomutt/neomutt/commit/65d64a5b60a4a3883f2cd799d92c6091d8854f23",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2018-14353",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in imap/util.c has an integer underflow.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "USN-3719-3",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/3719-3/",
                  },
                  {
                     name: "DSA-4277",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2018/dsa-4277",
                  },
                  {
                     name: "https://gitlab.com/muttmua/mutt/commit/e0131852c6059107939893016c8ff56b6e42865d",
                     refsource: "MISC",
                     url: "https://gitlab.com/muttmua/mutt/commit/e0131852c6059107939893016c8ff56b6e42865d",
                  },
                  {
                     name: "[debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html",
                  },
                  {
                     name: "GLSA-201810-07",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201810-07",
                  },
                  {
                     name: "http://www.mutt.org/news.html",
                     refsource: "MISC",
                     url: "http://www.mutt.org/news.html",
                  },
                  {
                     name: "https://neomutt.org/2018/07/16/release",
                     refsource: "MISC",
                     url: "https://neomutt.org/2018/07/16/release",
                  },
                  {
                     name: "USN-3719-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/3719-1/",
                  },
                  {
                     name: "https://github.com/neomutt/neomutt/commit/65d64a5b60a4a3883f2cd799d92c6091d8854f23",
                     refsource: "MISC",
                     url: "https://github.com/neomutt/neomutt/commit/65d64a5b60a4a3883f2cd799d92c6091d8854f23",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2018-14353",
      datePublished: "2018-07-17T17:00:00",
      dateReserved: "2018-07-17T00:00:00",
      dateUpdated: "2024-08-05T09:21:41.652Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2018-14350

Vulnerability from cvelistv5

Published

2018-07-17 17:00

Modified

2024-08-05 09:21

Severity ?

Summary

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer overflow for a FETCH response with a long INTERNALDATE field.

References

▼	URL	Tags
	http://www.securityfocus.com/bid/104931	vdb-entry, x_refsource_BID
	https://usn.ubuntu.com/3719-3/	vendor-advisory, x_refsource_UBUNTU
	https://gitlab.com/muttmua/mutt/commit/3287534daa3beac68e2e83ca4b4fe8a3148ff870	x_refsource_MISC
	https://www.debian.org/security/2018/dsa-4277	vendor-advisory, x_refsource_DEBIAN
	https://usn.ubuntu.com/3719-2/	vendor-advisory, x_refsource_UBUNTU
	https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201810-07	vendor-advisory, x_refsource_GENTOO
	http://www.mutt.org/news.html	x_refsource_MISC
	https://neomutt.org/2018/07/16/release	x_refsource_MISC
	https://github.com/neomutt/neomutt/commit/1b0f0d0988e6df4e32e9f4bf8780846ea95d4485	x_refsource_MISC
	https://usn.ubuntu.com/3719-1/	vendor-advisory, x_refsource_UBUNTU

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T09:21:41.686Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "104931",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/104931",
               },
               {
                  name: "USN-3719-3",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/3719-3/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://gitlab.com/muttmua/mutt/commit/3287534daa3beac68e2e83ca4b4fe8a3148ff870",
               },
               {
                  name: "DSA-4277",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2018/dsa-4277",
               },
               {
                  name: "USN-3719-2",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/3719-2/",
               },
               {
                  name: "[debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html",
               },
               {
                  name: "GLSA-201810-07",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201810-07",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://www.mutt.org/news.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://neomutt.org/2018/07/16/release",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/neomutt/neomutt/commit/1b0f0d0988e6df4e32e9f4bf8780846ea95d4485",
               },
               {
                  name: "USN-3719-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/3719-1/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2018-07-17T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer overflow for a FETCH response with a long INTERNALDATE field.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-10-31T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "104931",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/104931",
            },
            {
               name: "USN-3719-3",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/3719-3/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gitlab.com/muttmua/mutt/commit/3287534daa3beac68e2e83ca4b4fe8a3148ff870",
            },
            {
               name: "DSA-4277",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2018/dsa-4277",
            },
            {
               name: "USN-3719-2",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/3719-2/",
            },
            {
               name: "[debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html",
            },
            {
               name: "GLSA-201810-07",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201810-07",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://www.mutt.org/news.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://neomutt.org/2018/07/16/release",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/neomutt/neomutt/commit/1b0f0d0988e6df4e32e9f4bf8780846ea95d4485",
            },
            {
               name: "USN-3719-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/3719-1/",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2018-14350",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer overflow for a FETCH response with a long INTERNALDATE field.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "104931",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/104931",
                  },
                  {
                     name: "USN-3719-3",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/3719-3/",
                  },
                  {
                     name: "https://gitlab.com/muttmua/mutt/commit/3287534daa3beac68e2e83ca4b4fe8a3148ff870",
                     refsource: "MISC",
                     url: "https://gitlab.com/muttmua/mutt/commit/3287534daa3beac68e2e83ca4b4fe8a3148ff870",
                  },
                  {
                     name: "DSA-4277",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2018/dsa-4277",
                  },
                  {
                     name: "USN-3719-2",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/3719-2/",
                  },
                  {
                     name: "[debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html",
                  },
                  {
                     name: "GLSA-201810-07",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201810-07",
                  },
                  {
                     name: "http://www.mutt.org/news.html",
                     refsource: "MISC",
                     url: "http://www.mutt.org/news.html",
                  },
                  {
                     name: "https://neomutt.org/2018/07/16/release",
                     refsource: "MISC",
                     url: "https://neomutt.org/2018/07/16/release",
                  },
                  {
                     name: "https://github.com/neomutt/neomutt/commit/1b0f0d0988e6df4e32e9f4bf8780846ea95d4485",
                     refsource: "MISC",
                     url: "https://github.com/neomutt/neomutt/commit/1b0f0d0988e6df4e32e9f4bf8780846ea95d4485",
                  },
                  {
                     name: "USN-3719-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/3719-1/",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2018-14350",
      datePublished: "2018-07-17T17:00:00",
      dateReserved: "2018-07-17T00:00:00",
      dateUpdated: "2024-08-05T09:21:41.686Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2018-14357

Vulnerability from cvelistv5

Published

2018-07-17 17:00

Modified

2024-08-05 09:29

Severity ?

Summary

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with an automatic subscription.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2018:2526	vendor-advisory, x_refsource_REDHAT
	https://gitlab.com/muttmua/mutt/commit/185152818541f5cdc059cbff3f3e8b654fc27c1d	x_refsource_MISC
	https://usn.ubuntu.com/3719-3/	vendor-advisory, x_refsource_UBUNTU
	https://www.debian.org/security/2018/dsa-4277	vendor-advisory, x_refsource_DEBIAN
	https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html	mailing-list, x_refsource_MLIST
	https://github.com/neomutt/neomutt/commit/e52393740334443ae0206cab2d7caef381646725	x_refsource_MISC
	https://security.gentoo.org/glsa/201810-07	vendor-advisory, x_refsource_GENTOO
	http://www.mutt.org/news.html	x_refsource_MISC
	https://neomutt.org/2018/07/16/release	x_refsource_MISC
	https://usn.ubuntu.com/3719-1/	vendor-advisory, x_refsource_UBUNTU

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T09:29:50.597Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "RHSA-2018:2526",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2018:2526",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://gitlab.com/muttmua/mutt/commit/185152818541f5cdc059cbff3f3e8b654fc27c1d",
               },
               {
                  name: "USN-3719-3",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/3719-3/",
               },
               {
                  name: "DSA-4277",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2018/dsa-4277",
               },
               {
                  name: "[debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/neomutt/neomutt/commit/e52393740334443ae0206cab2d7caef381646725",
               },
               {
                  name: "GLSA-201810-07",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201810-07",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://www.mutt.org/news.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://neomutt.org/2018/07/16/release",
               },
               {
                  name: "USN-3719-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/3719-1/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2018-07-17T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with an automatic subscription.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-10-31T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "RHSA-2018:2526",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2018:2526",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gitlab.com/muttmua/mutt/commit/185152818541f5cdc059cbff3f3e8b654fc27c1d",
            },
            {
               name: "USN-3719-3",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/3719-3/",
            },
            {
               name: "DSA-4277",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2018/dsa-4277",
            },
            {
               name: "[debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/neomutt/neomutt/commit/e52393740334443ae0206cab2d7caef381646725",
            },
            {
               name: "GLSA-201810-07",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201810-07",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://www.mutt.org/news.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://neomutt.org/2018/07/16/release",
            },
            {
               name: "USN-3719-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/3719-1/",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2018-14357",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with an automatic subscription.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "RHSA-2018:2526",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2018:2526",
                  },
                  {
                     name: "https://gitlab.com/muttmua/mutt/commit/185152818541f5cdc059cbff3f3e8b654fc27c1d",
                     refsource: "MISC",
                     url: "https://gitlab.com/muttmua/mutt/commit/185152818541f5cdc059cbff3f3e8b654fc27c1d",
                  },
                  {
                     name: "USN-3719-3",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/3719-3/",
                  },
                  {
                     name: "DSA-4277",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2018/dsa-4277",
                  },
                  {
                     name: "[debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html",
                  },
                  {
                     name: "https://github.com/neomutt/neomutt/commit/e52393740334443ae0206cab2d7caef381646725",
                     refsource: "MISC",
                     url: "https://github.com/neomutt/neomutt/commit/e52393740334443ae0206cab2d7caef381646725",
                  },
                  {
                     name: "GLSA-201810-07",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201810-07",
                  },
                  {
                     name: "http://www.mutt.org/news.html",
                     refsource: "MISC",
                     url: "http://www.mutt.org/news.html",
                  },
                  {
                     name: "https://neomutt.org/2018/07/16/release",
                     refsource: "MISC",
                     url: "https://neomutt.org/2018/07/16/release",
                  },
                  {
                     name: "USN-3719-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/3719-1/",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2018-14357",
      datePublished: "2018-07-17T17:00:00",
      dateReserved: "2018-07-17T00:00:00",
      dateUpdated: "2024-08-05T09:29:50.597Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2018-14355

Vulnerability from cvelistv5

Published

2018-07-17 17:00

Modified

2024-08-05 09:29

Severity ?

Summary

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/util.c mishandles ".." directory traversal in a mailbox name.

References

▼	URL	Tags
	https://gitlab.com/muttmua/mutt/commit/31eef6c766f47df8281942d19f76e35f475c781d	x_refsource_MISC
	https://usn.ubuntu.com/3719-3/	vendor-advisory, x_refsource_UBUNTU
	https://www.debian.org/security/2018/dsa-4277	vendor-advisory, x_refsource_DEBIAN
	https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html	mailing-list, x_refsource_MLIST
	https://github.com/neomutt/neomutt/commit/57971dba06346b2d7179294f4528b8d4427a7c5d	x_refsource_MISC
	https://security.gentoo.org/glsa/201810-07	vendor-advisory, x_refsource_GENTOO
	http://www.mutt.org/news.html	x_refsource_MISC
	https://neomutt.org/2018/07/16/release	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T09:29:50.131Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://gitlab.com/muttmua/mutt/commit/31eef6c766f47df8281942d19f76e35f475c781d",
               },
               {
                  name: "USN-3719-3",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/3719-3/",
               },
               {
                  name: "DSA-4277",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2018/dsa-4277",
               },
               {
                  name: "[debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/neomutt/neomutt/commit/57971dba06346b2d7179294f4528b8d4427a7c5d",
               },
               {
                  name: "GLSA-201810-07",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201810-07",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://www.mutt.org/news.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://neomutt.org/2018/07/16/release",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2018-07-17T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/util.c mishandles \"..\" directory traversal in a mailbox name.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-10-31T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gitlab.com/muttmua/mutt/commit/31eef6c766f47df8281942d19f76e35f475c781d",
            },
            {
               name: "USN-3719-3",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/3719-3/",
            },
            {
               name: "DSA-4277",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2018/dsa-4277",
            },
            {
               name: "[debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/neomutt/neomutt/commit/57971dba06346b2d7179294f4528b8d4427a7c5d",
            },
            {
               name: "GLSA-201810-07",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201810-07",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://www.mutt.org/news.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://neomutt.org/2018/07/16/release",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2018-14355",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/util.c mishandles \"..\" directory traversal in a mailbox name.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://gitlab.com/muttmua/mutt/commit/31eef6c766f47df8281942d19f76e35f475c781d",
                     refsource: "MISC",
                     url: "https://gitlab.com/muttmua/mutt/commit/31eef6c766f47df8281942d19f76e35f475c781d",
                  },
                  {
                     name: "USN-3719-3",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/3719-3/",
                  },
                  {
                     name: "DSA-4277",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2018/dsa-4277",
                  },
                  {
                     name: "[debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html",
                  },
                  {
                     name: "https://github.com/neomutt/neomutt/commit/57971dba06346b2d7179294f4528b8d4427a7c5d",
                     refsource: "MISC",
                     url: "https://github.com/neomutt/neomutt/commit/57971dba06346b2d7179294f4528b8d4427a7c5d",
                  },
                  {
                     name: "GLSA-201810-07",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201810-07",
                  },
                  {
                     name: "http://www.mutt.org/news.html",
                     refsource: "MISC",
                     url: "http://www.mutt.org/news.html",
                  },
                  {
                     name: "https://neomutt.org/2018/07/16/release",
                     refsource: "MISC",
                     url: "https://neomutt.org/2018/07/16/release",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2018-14355",
      datePublished: "2018-07-17T17:00:00",
      dateReserved: "2018-07-17T00:00:00",
      dateUpdated: "2024-08-05T09:29:50.131Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2018-14362

Vulnerability from cvelistv5

Published

2018-07-17 17:00

Modified

2024-08-05 09:29

Severity ?

Summary

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not forbid characters that may have unsafe interaction with message-cache pathnames, as demonstrated by a '/' character.

References

▼	URL	Tags
	https://gitlab.com/muttmua/mutt/commit/6aed28b40a0410ec47d40c8c7296d8d10bae7576	x_refsource_MISC
	https://access.redhat.com/errata/RHSA-2018:2526	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/3719-3/	vendor-advisory, x_refsource_UBUNTU
	https://www.debian.org/security/2018/dsa-4277	vendor-advisory, x_refsource_DEBIAN
	https://github.com/neomutt/neomutt/commit/9bfab35522301794483f8f9ed60820bdec9be59e	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201810-07	vendor-advisory, x_refsource_GENTOO
	http://www.mutt.org/news.html	x_refsource_MISC
	https://neomutt.org/2018/07/16/release	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T09:29:50.136Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://gitlab.com/muttmua/mutt/commit/6aed28b40a0410ec47d40c8c7296d8d10bae7576",
               },
               {
                  name: "RHSA-2018:2526",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2018:2526",
               },
               {
                  name: "USN-3719-3",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/3719-3/",
               },
               {
                  name: "DSA-4277",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2018/dsa-4277",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/neomutt/neomutt/commit/9bfab35522301794483f8f9ed60820bdec9be59e",
               },
               {
                  name: "[debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html",
               },
               {
                  name: "GLSA-201810-07",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201810-07",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://www.mutt.org/news.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://neomutt.org/2018/07/16/release",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2018-07-17T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not forbid characters that may have unsafe interaction with message-cache pathnames, as demonstrated by a '/' character.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-10-31T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gitlab.com/muttmua/mutt/commit/6aed28b40a0410ec47d40c8c7296d8d10bae7576",
            },
            {
               name: "RHSA-2018:2526",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2018:2526",
            },
            {
               name: "USN-3719-3",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/3719-3/",
            },
            {
               name: "DSA-4277",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2018/dsa-4277",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/neomutt/neomutt/commit/9bfab35522301794483f8f9ed60820bdec9be59e",
            },
            {
               name: "[debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html",
            },
            {
               name: "GLSA-201810-07",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201810-07",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://www.mutt.org/news.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://neomutt.org/2018/07/16/release",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2018-14362",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not forbid characters that may have unsafe interaction with message-cache pathnames, as demonstrated by a '/' character.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://gitlab.com/muttmua/mutt/commit/6aed28b40a0410ec47d40c8c7296d8d10bae7576",
                     refsource: "MISC",
                     url: "https://gitlab.com/muttmua/mutt/commit/6aed28b40a0410ec47d40c8c7296d8d10bae7576",
                  },
                  {
                     name: "RHSA-2018:2526",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2018:2526",
                  },
                  {
                     name: "USN-3719-3",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/3719-3/",
                  },
                  {
                     name: "DSA-4277",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2018/dsa-4277",
                  },
                  {
                     name: "https://github.com/neomutt/neomutt/commit/9bfab35522301794483f8f9ed60820bdec9be59e",
                     refsource: "MISC",
                     url: "https://github.com/neomutt/neomutt/commit/9bfab35522301794483f8f9ed60820bdec9be59e",
                  },
                  {
                     name: "[debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html",
                  },
                  {
                     name: "GLSA-201810-07",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201810-07",
                  },
                  {
                     name: "http://www.mutt.org/news.html",
                     refsource: "MISC",
                     url: "http://www.mutt.org/news.html",
                  },
                  {
                     name: "https://neomutt.org/2018/07/16/release",
                     refsource: "MISC",
                     url: "https://neomutt.org/2018/07/16/release",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2018-14362",
      datePublished: "2018-07-17T17:00:00",
      dateReserved: "2018-07-17T00:00:00",
      dateUpdated: "2024-08-05T09:29:50.136Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2018-14354

Vulnerability from cvelistv5

Published

2018-07-17 17:00

Modified

2024-08-05 09:29

Severity ?

Summary

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2018:2526	vendor-advisory, x_refsource_REDHAT
	https://gitlab.com/muttmua/mutt/commit/185152818541f5cdc059cbff3f3e8b654fc27c1d	x_refsource_MISC
	https://usn.ubuntu.com/3719-3/	vendor-advisory, x_refsource_UBUNTU
	https://www.debian.org/security/2018/dsa-4277	vendor-advisory, x_refsource_DEBIAN
	https://github.com/neomutt/neomutt/commit/95e80bf9ff10f68cb6443f760b85df4117cb15eb	x_refsource_MISC
	https://usn.ubuntu.com/3719-2/	vendor-advisory, x_refsource_UBUNTU
	https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201810-07	vendor-advisory, x_refsource_GENTOO
	http://www.securityfocus.com/bid/104925	vdb-entry, x_refsource_BID
	http://www.mutt.org/news.html	x_refsource_MISC
	https://neomutt.org/2018/07/16/release	x_refsource_MISC
	https://usn.ubuntu.com/3719-1/	vendor-advisory, x_refsource_UBUNTU

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T09:29:50.150Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "RHSA-2018:2526",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2018:2526",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://gitlab.com/muttmua/mutt/commit/185152818541f5cdc059cbff3f3e8b654fc27c1d",
               },
               {
                  name: "USN-3719-3",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/3719-3/",
               },
               {
                  name: "DSA-4277",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2018/dsa-4277",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/neomutt/neomutt/commit/95e80bf9ff10f68cb6443f760b85df4117cb15eb",
               },
               {
                  name: "USN-3719-2",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/3719-2/",
               },
               {
                  name: "[debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html",
               },
               {
                  name: "GLSA-201810-07",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201810-07",
               },
               {
                  name: "104925",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/104925",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://www.mutt.org/news.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://neomutt.org/2018/07/16/release",
               },
               {
                  name: "USN-3719-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/3719-1/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2018-07-17T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with a manual subscription or unsubscription.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-10-31T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "RHSA-2018:2526",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2018:2526",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gitlab.com/muttmua/mutt/commit/185152818541f5cdc059cbff3f3e8b654fc27c1d",
            },
            {
               name: "USN-3719-3",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/3719-3/",
            },
            {
               name: "DSA-4277",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2018/dsa-4277",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/neomutt/neomutt/commit/95e80bf9ff10f68cb6443f760b85df4117cb15eb",
            },
            {
               name: "USN-3719-2",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/3719-2/",
            },
            {
               name: "[debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html",
            },
            {
               name: "GLSA-201810-07",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201810-07",
            },
            {
               name: "104925",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/104925",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://www.mutt.org/news.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://neomutt.org/2018/07/16/release",
            },
            {
               name: "USN-3719-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/3719-1/",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2018-14354",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with a manual subscription or unsubscription.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "RHSA-2018:2526",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2018:2526",
                  },
                  {
                     name: "https://gitlab.com/muttmua/mutt/commit/185152818541f5cdc059cbff3f3e8b654fc27c1d",
                     refsource: "MISC",
                     url: "https://gitlab.com/muttmua/mutt/commit/185152818541f5cdc059cbff3f3e8b654fc27c1d",
                  },
                  {
                     name: "USN-3719-3",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/3719-3/",
                  },
                  {
                     name: "DSA-4277",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2018/dsa-4277",
                  },
                  {
                     name: "https://github.com/neomutt/neomutt/commit/95e80bf9ff10f68cb6443f760b85df4117cb15eb",
                     refsource: "MISC",
                     url: "https://github.com/neomutt/neomutt/commit/95e80bf9ff10f68cb6443f760b85df4117cb15eb",
                  },
                  {
                     name: "USN-3719-2",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/3719-2/",
                  },
                  {
                     name: "[debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html",
                  },
                  {
                     name: "GLSA-201810-07",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201810-07",
                  },
                  {
                     name: "104925",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/104925",
                  },
                  {
                     name: "http://www.mutt.org/news.html",
                     refsource: "MISC",
                     url: "http://www.mutt.org/news.html",
                  },
                  {
                     name: "https://neomutt.org/2018/07/16/release",
                     refsource: "MISC",
                     url: "https://neomutt.org/2018/07/16/release",
                  },
                  {
                     name: "USN-3719-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/3719-1/",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2018-14354",
      datePublished: "2018-07-17T17:00:00",
      dateReserved: "2018-07-17T00:00:00",
      dateUpdated: "2024-08-05T09:29:50.150Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2018-14358

Vulnerability from cvelistv5

Published

2018-07-17 17:00

Modified

2024-08-05 09:29

Severity ?

Summary

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer overflow for a FETCH response with a long RFC822.SIZE field.

References

▼	URL	Tags
	https://usn.ubuntu.com/3719-3/	vendor-advisory, x_refsource_UBUNTU
	https://gitlab.com/muttmua/mutt/commit/3287534daa3beac68e2e83ca4b4fe8a3148ff870	x_refsource_MISC
	https://www.debian.org/security/2018/dsa-4277	vendor-advisory, x_refsource_DEBIAN
	https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201810-07	vendor-advisory, x_refsource_GENTOO
	http://www.mutt.org/news.html	x_refsource_MISC
	https://neomutt.org/2018/07/16/release	x_refsource_MISC
	https://github.com/neomutt/neomutt/commit/1b0f0d0988e6df4e32e9f4bf8780846ea95d4485	x_refsource_MISC
	https://usn.ubuntu.com/3719-1/	vendor-advisory, x_refsource_UBUNTU

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T09:29:50.097Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "USN-3719-3",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/3719-3/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://gitlab.com/muttmua/mutt/commit/3287534daa3beac68e2e83ca4b4fe8a3148ff870",
               },
               {
                  name: "DSA-4277",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2018/dsa-4277",
               },
               {
                  name: "[debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html",
               },
               {
                  name: "GLSA-201810-07",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201810-07",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://www.mutt.org/news.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://neomutt.org/2018/07/16/release",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/neomutt/neomutt/commit/1b0f0d0988e6df4e32e9f4bf8780846ea95d4485",
               },
               {
                  name: "USN-3719-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/3719-1/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2018-07-17T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer overflow for a FETCH response with a long RFC822.SIZE field.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-10-31T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "USN-3719-3",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/3719-3/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gitlab.com/muttmua/mutt/commit/3287534daa3beac68e2e83ca4b4fe8a3148ff870",
            },
            {
               name: "DSA-4277",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2018/dsa-4277",
            },
            {
               name: "[debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html",
            },
            {
               name: "GLSA-201810-07",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201810-07",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://www.mutt.org/news.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://neomutt.org/2018/07/16/release",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/neomutt/neomutt/commit/1b0f0d0988e6df4e32e9f4bf8780846ea95d4485",
            },
            {
               name: "USN-3719-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/3719-1/",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2018-14358",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer overflow for a FETCH response with a long RFC822.SIZE field.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "USN-3719-3",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/3719-3/",
                  },
                  {
                     name: "https://gitlab.com/muttmua/mutt/commit/3287534daa3beac68e2e83ca4b4fe8a3148ff870",
                     refsource: "MISC",
                     url: "https://gitlab.com/muttmua/mutt/commit/3287534daa3beac68e2e83ca4b4fe8a3148ff870",
                  },
                  {
                     name: "DSA-4277",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2018/dsa-4277",
                  },
                  {
                     name: "[debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html",
                  },
                  {
                     name: "GLSA-201810-07",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201810-07",
                  },
                  {
                     name: "http://www.mutt.org/news.html",
                     refsource: "MISC",
                     url: "http://www.mutt.org/news.html",
                  },
                  {
                     name: "https://neomutt.org/2018/07/16/release",
                     refsource: "MISC",
                     url: "https://neomutt.org/2018/07/16/release",
                  },
                  {
                     name: "https://github.com/neomutt/neomutt/commit/1b0f0d0988e6df4e32e9f4bf8780846ea95d4485",
                     refsource: "MISC",
                     url: "https://github.com/neomutt/neomutt/commit/1b0f0d0988e6df4e32e9f4bf8780846ea95d4485",
                  },
                  {
                     name: "USN-3719-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/3719-1/",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2018-14358",
      datePublished: "2018-07-17T17:00:00",
      dateReserved: "2018-07-17T00:00:00",
      dateUpdated: "2024-08-05T09:29:50.097Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_suse

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature