Moderate: mutt security update
Summary
ALSA-2022:8219: Moderate: mutt security update. Affects mutt versions < 5:2.2.6-1.el9. Fixed in 5:2.2.6-1.el9. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Mutt is a low resource, highly configurable, text-based MIME e-mail client. It supports various e-mail storing formats, such as mbox and Maildir, as well as protocols like POP3 and IMAP.
Vulnerability Detail
A buffer overflow vulnerability (CVE-2022-1328) has been discovered in the uudecoder function of mutt. This vulnerability could allow an attacker to execute arbitrary code or cause a denial of service by sending a specially crafted email. The impact of this vulnerability is considered moderate.
How To Fix
Minimum fixed version
5:2.2.6-1.el9
This is the first release that contains the fix.
sudo dnf update muttTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
In conclusion, a buffer overflow vulnerability has been discovered in mutt. It is recommended to update mutt to the latest version to mitigate the risk. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for mutt →
FAQ
Mutt is a text-based email client that is highly configurable and supports various email storing formats and protocols.
The vulnerability could allow an attacker to execute arbitrary code or cause a denial of service.
You can fix this vulnerability by updating mutt to version 5:2.2.6-1.el9 or later.
No specific workarounds have been mentioned for this vulnerability.
You can refer to the CVE page(s) listed in the References section of the vulnerability details for more information.
Related vulnerabilities
Recent vulnerabilities recorded for mutt.
