CVE-2018-14350

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16

published July 17, 2018

CVSS
—
EPSS
5%
Percentile
92.1
In the wild
Unconfirmed
What it is

⚠️ A long FETCH response could spell disaster! Mutt and NeoMutt versions prior to 1.10.1 are vulnerable to a stack-based buffer overflow that could trip you up. 🛠️ Think of it like a restaurant serving out-of-control portions of food — when the plate overflows, it might cause a mess that spills into the kitchen, disrupting everything in its path! 🍽️ An attacker might exploit this to cause a crash or even execute arbitrary code, leading to system instability and potential data loss. It's a surprisingly sneaky way for problems to sneak into your email client!

Put simply

Think of it like a restaurant serving out-of-control portions of food — when the plate overflows, it might cause a mess that spills into the kitchen, disrupting everything in its path! 🍽️ The vulnerability arises in the handling of the FETCH response with an excessively long INTERNALDATE field, leading to a stack-based buffer overflow in the affected applications.

What to do

An attacker might exploit this to cause a crash or even execute arbitrary code, leading to system instability and potential data loss. It's a surprisingly sneaky way for problems to sneak into your email client! Upgrade to Mutt version 1.10.1 or newer and for NeoMutt, ensure you’re on a build released after July 16, 2018. Always keep your applications up to date to avoid such slippery situations! You've got this! By updating your software, you're one step closer to keeping your digital environment secure! 🦸

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04956 · 92.1th percentile
Published
2018-07-17T17:00Z
EPSS history
Timeline
  • 17 JUL 17:00Z
    An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16
    cvelistv5