ISOMAN

CVE

CVE-2018-14357

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with an automatic subscription.

Severity
CRITICAL
CVSS
9.8
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://www.mutt.org/news.html
  2. https://access.redhat.com/errata/RHSA-2018:2526
  3. https://github.com/neomutt/neomutt/commit/e52393740334443ae0206cab2d7caef381646725
  4. https://gitlab.com/muttmua/mutt/commit/185152818541f5cdc059cbff3f3e8b654fc27c1d
  5. https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html
  6. https://neomutt.org/2018/07/16/release
  7. https://security.gentoo.org/glsa/201810-07
  8. https://usn.ubuntu.com/3719-1/
  9. https://usn.ubuntu.com/3719-3/
  10. https://www.debian.org/security/2018/dsa-4277
  11. http://www.mutt.org/news.html
  12. https://access.redhat.com/errata/RHSA-2018:2526
  13. https://github.com/neomutt/neomutt/commit/e52393740334443ae0206cab2d7caef381646725
  14. https://gitlab.com/muttmua/mutt/commit/185152818541f5cdc059cbff3f3e8b654fc27c1d
  15. https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html
  16. https://neomutt.org/2018/07/16/release
  17. https://security.gentoo.org/glsa/201810-07
  18. https://usn.ubuntu.com/3719-1/
  19. https://usn.ubuntu.com/3719-3/
  20. https://www.debian.org/security/2018/dsa-4277