CVE-2020-14093: Medium severity Mutt Mutt vulnerability
Last updated 25 August 2025
Other sources
Mutt before 1.14.3 allows an IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/muttto a version that resolves this vulnerability.Fixed in 2.0.5-4.1+deb11u3Fixed in 2.2.12-0.1~deb12u1Fixed in 2.2.9-1+deb12u1Fixed in 2.2.13-1 - Upgrade
Upgrade
debian/neomuttto a version that resolves this vulnerability.Fixed in 20201127+dfsg.1-1.2Fixed in 20220429+dfsg1-4.1Fixed in 20250510+dfsg-2Fixed in 20260105+dfsg-1 - Upgrade
Upgrade
alpine/muttto a version that resolves this vulnerability.Fixed in 1.14.4-r0 - Upgrade
Upgrade
Muttto a version that resolves this vulnerability.Fixed in 1.14.3
Event History
Frequently Asked Questions
What is the severity of CVE-2020-14093?
The severity of CVE-2020-14093 is medium with a severity value of 5.9.
How does CVE-2020-14093 impact Mutt?
CVE-2020-14093 allows an IMAP fcc/postpone man-in-the-middle attack on Mutt before version 1.14.3.
How can I fix CVE-2020-14093?
To fix CVE-2020-14093, update Mutt to version 1.14.3 or later.
What is the Common Weakness Enumeration (CWE) for CVE-2020-14093?
The CWE for CVE-2020-14093 is CWE-319.
Where can I find more information about CVE-2020-14093?
You can find more information about CVE-2020-14093 on the following websites: http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00064.html, http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00070.html, http://www.mutt.org.