Known vulnerabilities in Mutt

Vendor: Mutt.org
Software: Mutt
Software CPE: cpe:2.3:a:mutt_org:mutt:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 31
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Mutt Mutt is affected by 31 known vulnerabilities: 4 high, 9 medium, 18 low Critical High Medium Low

Vulnerabilities (31)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU80636 - NULL Pointer Dereference
CVE-2023-4874
CWE-476 Low
No
No
2.2.12 11.09.2023 SB2023091177
SB2023091180
SB2023091502
and 9 more
#VU80635 - NULL Pointer Dereference
CVE-2023-4875
CWE-476 Low
No
No
2.2.12 11.09.2023 SB2023091177
SB2023091180
SB2023091502
and 9 more
#VU62357 - Memory corruption
CVE-2022-1328
CWE-119 High
No
No
2.2.3 15.04.2022 SB2022041517
SB2022042821
SB2022110862
and 8 more
#VU53619 - Out-of-bounds read
CVE-2021-32055
CWE-125 Low
No
No
2.0.7 27.05.2021 SB2021052717
SB2021052718
SB2022042821
#VU50017 - Resource exhaustion
CVE-2021-3181
CWE-400 Medium
No
No
2.0.5 19.01.2021 SB2021012620
SB2021012621
SB2021012630
and 7 more
#VU48662 - Cleartext Transmission of Sensitive Information
CVE-2020-28896
CWE-319 Medium
No
No
2.0.2 23.11.2020 SB2020112603
SB2020112605
SB2020112619
and 6 more
#VU29425 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2020-14954
CWE-74 Medium
No
No
1.14.4 01.07.2020 SB2020070107
SB2020070108
SB2020070109
and 6 more
#VU29424 - Improper Certificate Validation
CVE-2020-14154
CWE-295 Medium
No
No
1.14.3 01.07.2020 SB2020070106
SB2020070108
SB2020070109
and 3 more
#VU29423 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2020-14093
CWE-300 Low
No
No
1.14.3 01.07.2020 SB2020070106
SB2020070108
SB2020070109
and 6 more
#VU14143 - Command injection
CVE-2018-14357
CWE-77 Low
No
No
1.10.1 31.07.2018 SB2018073115
SB2018073116
SB2018080615
and 8 more
#VU14142 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2018-14355
CWE-22 Low
No
No
1.10.1 31.07.2018 SB2018073115
SB2018073116
SB2018080615
and 8 more
#VU14141 - Command injection
CVE-2018-14354
CWE-77 Low
No
No
1.10.1 31.07.2018 SB2018073115
SB2018073116
SB2018080615
and 8 more
#VU14140 - Integer underflow
CVE-2018-14353
CWE-191 Low
No
No
1.10.1 31.07.2018 SB2018073115
SB2018073116
SB2018080615
and 7 more
#VU14139 - Stack-based buffer overflow
CVE-2018-14352
CWE-121 Low
No
No
1.10.1 31.07.2018 SB2018073115
SB2018073116
SB2018080615
and 7 more
#VU14138 - Improper input validation
CVE-2018-14351
CWE-20 Low
No
No
1.10.1 31.07.2018 SB2018073115
SB2018073116
SB2018080615
and 7 more
#VU14137 - Stack-based buffer overflow
CVE-2018-14350
CWE-121 Low
No
No
1.10.1 31.07.2018 SB2018073115
SB2018073116
SB2018080615
and 7 more
#VU14136 - Improper input validation
CVE-2018-14349
CWE-20 Low
No
No
1.10.1 31.07.2018 SB2018073115
SB2018073116
SB2018080615
and 7 more
#VU13970 - Permissions, Privileges, and Access Controls
CVE-2018-14356
CWE-264 Low
No
No
1.10.1 18.07.2018 SB2018072306
SB2018073115
SB2018073116
and 8 more
#VU33286 - Heap-based Buffer Overflow
CVE-2014-9116
CWE-122 Medium
No
No
1.5.24 02.12.2014 SB2014120202
SB2019011713
SB2015010601
and 5 more
#VU32554 - Memory corruption
CVE-2014-0467
CWE-119 Low
No
No
1.5.23 14.03.2014 SB2014031401
SB2014041719
SB2014040205
and 4 more


Showing elements 1 - 20 out of 31