Headline
Ubuntu Security Notice USN-6374-2
Ubuntu Security Notice 6374-2 - USN-6374-1 fixed vulnerabilities in Mutt. This update provides the corresponding updates for Ubuntu 23.10. It was discovered that Mutt incorrectly handled certain email header contents. If a user were tricked into opening a specially crafted message, a remote attacker could possibly use this issue to cause a denial of service.
==========================================================================Ubuntu Security Notice USN-6374-2October 19, 2023mutt vulnerabilities==========================================================================A security issue affects these releases of Ubuntu and its derivatives:- Ubuntu 23.10Summary:Mutt could be made to crash if it received specially craftedinput.Software Description:- mutt: text-based mailreader supporting MIME, GPG, PGP and threadingDetails:USN-6374-1 fixed vulnerabilities in Mutt. This update provides thecorresponding updates for Ubuntu 23.10.Original advisory details: It was discovered that Mutt incorrectly handled certain email header contents. If a user were tricked into opening a specially crafted message, a remote attacker could possibly use this issue to cause a denial of service. (CVE-2023-4874, CVE-2023-4875)Update instructions:The problem can be corrected by updating your system to the followingpackage versions:Ubuntu 23.10: mutt 2.2.9-1ubuntu0.23.10.1In general, a standard system update will make all the necessary changes.References: https://ubuntu.com/security/notices/USN-6374-2 https://ubuntu.com/security/notices/USN-6374-1 CVE-2023-4874, CVE-2023-4875Package Information: https://launchpad.net/ubuntu/+source/mutt/2.2.9-1ubuntu0.23.10.1
Related news
Ubuntu Security Notice 6374-1 - It was discovered that Mutt incorrectly handled certain email header content. If a user were tricked into opening a specially crafted message, a remote attacker could possibly use this issue to cause a denial of service.
Ubuntu Security Notice 6374-1 - It was discovered that Mutt incorrectly handled certain email header content. If a user were tricked into opening a specially crafted message, a remote attacker could possibly use this issue to cause a denial of service.
Debian Linux Security Advisory 5494-1 - Several NULL pointer dereference flaws were discovered in Mutt, a text-based mailreader supporting MIME, GPG, PGP and threading, which may result in denial of service (application crash) when viewing a specially crafted email or when composing from a specially crafted draft message.
Debian Linux Security Advisory 5494-1 - Several NULL pointer dereference flaws were discovered in Mutt, a text-based mailreader supporting MIME, GPG, PGP and threading, which may result in denial of service (application crash) when viewing a specially crafted email or when composing from a specially crafted draft message.
Null pointer dereference when viewing a specially crafted email in Mutt >1.5.2 <2.2.12
Null pointer dereference when composing from a specially crafted draft message in Mutt >1.5.2 <2.2.12