CVE-2018-14356

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16

published July 17, 2018

CVSS
—
EPSS
3%
Percentile
87.9
In the wild
Unconfirmed
What it is

⚠️ A zero-length UID could lead to unexpected behavior in Mutt and NeoMutt! This vulnerability is a surprising oversight that’s worth a closer look. 😄 Think of it like a restaurant order that’s missing key details. Without a proper UID, the kitchen might not know how to prepare the dish, leading to confusion and potentially wrong orders for customers (or in this case, email messages). While this isn’t an immediate crisis, it could cause some frustrating email mix-ups or erratic behaviors in the program. Imagine missing emails or unexpected errors cropping up when they’re least convenient — not a catastrophe, but definitely a nuisance!

Put simply

Think of it like a restaurant order that’s missing key details. Without a proper UID, the kitchen might not know how to prepare the dish, leading to confusion and potentially wrong orders for customers (or in this case, email messages). The vulnerability occurs because Mutt (before version 1.10.1) and NeoMutt (before July 16, 2018) mishandle a zero-length UID in pop.c, which can lead to unpredictable results when processing emails.

What to do

While this isn’t an immediate crisis, it could cause some frustrating email mix-ups or erratic behaviors in the program. Imagine missing emails or unexpected errors cropping up when they’re least convenient — not a catastrophe, but definitely a nuisance! To stay safe, upgrade to Mutt version 1.10.1 or later and ensure NeoMutt is updated to a version released after July 16, 2018. Regularly check for any updates to keep your email client secure! You've got this! With these updates, your email experience will be much smoother and more reliable. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03166 · 87.9th percentile
Published
2018-07-17T17:00Z
EPSS history
Timeline
  • 17 JUL 17:00Z
    An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16
    cvelistv5