Permalink
CVE-2022-1328
4.3 MEDIUM
- CVSS version: 3.1
- Attack vector (AV): NETWORK
- Attack complexity (AC): LOW
- Privileges required (PR): NONE
- User interaction (UI): REQUIRED
- Scope (S): UNCHANGED
- Confidentiality impact (C): LOW
- Integrity impact (I): NONE
- Availability impact (A): NONE
Buffer Overflow in uudecoder in Mutt affecting all versions starting …
Buffer Overflow in uudecoder in Mutt affecting all versions starting from 0.94.13 before 2.2.3 allows read past end of input line
References
- https://gitlab.com/muttmua/mutt/-/issues/404
- https://gitlab.com/muttmua/mutt/-/commit/e5ed080c00e59701ca62ef9b2a6d2612ebf765…
- https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1328.json
- https://gitlab.com/muttmua/mutt/-/issues/404 x_transferred
- https://gitlab.com/muttmua/mutt/-/commit/e5ed080c00e59701ca62ef9b2a6d2612ebf765… x_transferred
- https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1328.json x_transferred
Affected products
Mutt
- ==>=0.94.13, <2.2.3
Matching in nixpkgs
pkgs.mutt
Small but very powerful text-based mail client
pkgs.mutter
Window manager for GNOME
pkgs.neomutt
Small but very powerful text-based mail client
pkgs.mutt-ics
Tool to show calendar event details in Mutt
pkgs.mutter46
Window manager for GNOME
pkgs.mutter48
Window manager for GNOME
pkgs.mutt-wizard
System for automatically configuring mutt and isync
pkgs.fontmuttmisc
ClearU pcf fonts
pkgs.notmuch-mutt
Mutt support for notmuch
pkgs.font-mutt-misc
ClearU pcf fonts
pkgs.pantheon.mutter
Window manager for GNOME
pkgs.xorg.fontmuttmisc
None
-
nixos-unstable 0.0.0+rev=173b0ab
- nixpkgs-unstable 0.0.0+rev=173b0ab
- nixos-unstable-small 0.0.0+rev=173b0ab
Package maintainers
-
@rnhmjoj Michele Guerini Rocco <rnhmjoj@inventati.org>
-
@mh182 Max Hofer <mh182@chello.at>
-
@SCOTT-HAMILTON Scott Hamilton <sgn.hamilton@protonmail.com>
-
@hedning Tor Hedin Brønner <torhedinbronner@gmail.com>
-
@bobby285271 Bobby Rong <rjl931189261@126.com>
-
@jtojnar Jan Tojnar <jtojnar@gmail.com>
-
@dasj19 Daniel Șerbănescu <daniel@serbanescu.dk>
-
@davidak David Kleuker <post@davidak.de>
-
@RaitoBezarius Ryan Lahfa <ryan@lahfa.xyz>
-
@ethancedwards8 Ethan Carter Edwards <ethan@ethancedwards.com>
-
@erikryb Erik Rybakken <erik.rybakken@math.ntnu.no>
-
@peterhoeg Peter Hoeg <peter@hoeg.com>