CVE-2018-14353: Integer Underflow
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imapquotestring in imap/util.c has an integer underflow.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2018-14353?
CVE-2018-14353 is a vulnerability discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16 that resides in the imap_quote_string function in imap/util.c and has an integer underflow.
What is the severity of CVE-2018-14353?
The severity of CVE-2018-14353 is critical with a CVSS score of 9.8.
Which software versions are affected by CVE-2018-14353?
Mutt versions before 1.10.1 and NeoMutt versions before 2018-07-16 are affected by CVE-2018-14353.
How can I fix CVE-2018-14353?
To fix CVE-2018-14353, update Mutt to version 1.10.1 or later, or update NeoMutt to version 2018-07-16 or later.
Where can I find more information about CVE-2018-14353?
You can find more information about CVE-2018-14353 at the following references: [Mutt News](http://www.mutt.org/news.html), [NeoMutt Commit](https://github.com/neomutt/neomutt/commit/65d64a5b60a4a3883f2cd799d92c6091d8854f23), [Mutt Commit](https://gitlab.com/muttmua/mutt/commit/e0131852c6059107939893016c8ff56b6e42865d).