Moderate: Mutt security, bug fix, and enhancement update
Summary
ALSA-2021:4181: Moderate: mutt security, bug fix, and enhancement update. Affects mutt versions < 5:2.0.7-1.el8. Fixed in 5:2.0.7-1.el8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Mutt is a low resource, highly configurable, text-based MIME e-mail client. It supports various e-mail storing formats, such as mbox and Maildir, and protocols like POP3 and IMAP. The package has been upgraded to a later upstream version, mutt 2.0.7.
Vulnerability Detail
The vulnerability (CVE-2020-28896) in Mutt arises from incorrect handling of invalid initial IMAP responses, which could lead to an authentication attempt over an unencrypted connection. This could potentially expose sensitive information to eavesdroppers. Another vulnerability (CVE-2021-3181) involves a memory leak when parsing rfc822 group addresses. This could result in resource exhaustion and potential denial of service attacks.
How To Fix
Minimum fixed version
5:2.0.7-1.el8
This is the first release that contains the fix.
sudo dnf update muttTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
In conclusion, the Mutt package has been updated to address security vulnerabilities and provide bug fixes and enhancements. It is important to update the package to the latest version to mitigate the risks associated with these vulnerabilities. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for mutt →
FAQ
Mutt is a text-based e-mail client known for its low resource usage and high configurability.
The vulnerability could allow an attacker to intercept sensitive information transmitted over an unencrypted connection.
The vulnerability could lead to resource exhaustion and potential denial of service attacks.
The mutt package can be updated by following the package update procedure specific to your operating system or package manager.
There is no specific workaround mentioned for these vulnerabilities. It is recommended to update the mutt package to the latest version.
Related vulnerabilities
Recent vulnerabilities recorded for mutt.
