CVE-2018-14362: Buffer Overflow
A flaw was found in mutt before 1.10.1. There is a path traversal flaw for UID values in POP bcache directory.
References:
http://www.mutt.org/news.html https://gitlab.com/muttmua/mutt/blob/master/ChangeLog
Other sources
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not forbid characters that may have unsafe interaction with message-cache pathnames, as demonstrated by a '/' character.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2018-14362?
CVE-2018-14362 is a vulnerability discovered in Mutt and NeoMutt email clients.
What is the severity of CVE-2018-14362?
CVE-2018-14362 has a severity rating of critical (9.8).
How does CVE-2018-14362 affect Mutt and NeoMutt?
CVE-2018-14362 allows characters that may have unsafe interaction with message-cache pathnames, potentially leading to security vulnerabilities.
How can I fix CVE-2018-14362 in Mutt and NeoMutt?
To fix CVE-2018-14362, you should update to the latest versions of Mutt (1.10.1 or later) or NeoMutt (20180716 or later).
Where can I find more information about CVE-2018-14362?
You can find more information about CVE-2018-14362 in the official Mutt website and the Red Hat Security Advisory.