Command injection in Mutt - CVE-2018-14354

Vulnerability identifier: #VU14141

CSH Severity: Low

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-14354

CWE-ID: CWE-77

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary commands on the target system.

The vulnerability exists due to command injection. A remote attacker can use IMAP servers to inject and execute arbitrary commands via backquote characters, related to the mailboxes command associated with a manual subscription or unsubscription.

Mutt
Arch Linux
Gentoo Linux
Debian Linux
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux for Power
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for ARM
Red Hat Enterprise Linux EUS Compute Node
Opensuse
Fedora
mutt (Alpine package)
mutt

Update to version 1.10.1.

Mutt - update to 1.10.1
mutt (Alpine package) - update to 1.10.1-r0
mutt - addressed in versions 1.9.2-2.fc27, 1.10.1-1.fc28

• http://www.mutt.org/news.html

• Multiple vulnerabilities in Mutt
• Arch Linux update for neomutt
• OpenSUSE Linux update for mutt
• Debian update for mutt
• Red Hat update for mutt
• Gentoo update for Mutt, NeoMutt
• OpenSUSE Linux update for mutt
• Command injection in mutt (Alpine package)
• Fedora 28 update for mutt
• Fedora 27 update for mutt