medium4.3
CVE-2023-4874
Null pointer dereference when viewing a specially crafted email in Mutt >1.5.2 <2.2.12
Impact
Null pointer dereference when viewing a specially crafted email in Mutt >1.5.2 <2.2.12
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mutt | Mutt | after 1.5.2 before 2.2.12 |
| Debian | Debian Linux | Versions 10.0, 11.0, 12.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://gitlab.com/muttmua/mutt/-/commit/452ee330e094bfc7c9a68555e5152b1826534555.patch
- https://gitlab.com/muttmua/mutt/-/commit/a4752eb0ae0a521eec02e59e51ae5daedf74fda0.patch
- http://www.openwall.com/lists/oss-security/2023/09/26/6
- https://gitlab.com/muttmua/mutt/-/commit/452ee330e094bfc7c9a68555e5152b1826534555.patch
- https://gitlab.com/muttmua/mutt/-/commit/a4752eb0ae0a521eec02e59e51ae5daedf74fda0.patch
- https://lists.debian.org/debian-lts-announce/2023/09/msg00021.html
- https://www.debian.org/security/2023/dsa-5494