Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Ubuntu 18.04 LTS USN-3719-1 Critical: Mutt Remote Code Execution

ubuntu
Calendar Grey July 23, 2018
Dist Ubuntu Esm H88
A number of critical security flaws have been addressed in Mutt, posing significant threats for unauthorized code execution and potential leakage of private data.
Several security issues were fixed in Mutt.

Summary

Several security issues were fixed in Mutt.

Software Description:

- mutt: text-based mailreader supporting MIME, GPG, PGP and threading

Details:

It was discovered that Mutt incorrectly handled certain requests.

An attacker could possibly use this to execute arbitrary code.

(CVE-2018-14350, CVE-2018-14352, CVE-2018-14354, CVE-2018-14359,

CVE-2018-14358, CVE-2018-14353 ,CVE-2018-14357)

It was discovered that Mutt incorrectly handled certain inputs.

An attacker could possibly use this to access or expose sensitive

information. (CVE-2018-14355, CVE-2018-14356, CVE-2018-14351,

CVE-2018-14362, CVE-2018-14349)

Topics%20covered

Topics Covered

security advisory critical software update remote code execution Ubuntu information exposure Mutt

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS:
  mutt                            1.9.4-3ubuntu0.1

Ubuntu 16.04 LTS:
  mutt                            1.5.24-1ubuntu0.1
  mutt-patched                    1.5.24-1ubuntu0.1

Ubuntu 14.04 LTS:
  mutt                            1.5.21-6.4ubuntu2.2
  mutt-patched                    1.5.21-6.4ubuntu2.2

After a standard system update you need to restart mutt to make all the
necessary changes.

References

  https://ubuntu.com/security/notices/USN-3719-1

  CVE-2018-14349, CVE-2018-14350, CVE-2018-14351, CVE-2018-14352,

  CVE-2018-14353, CVE-2018-14354, CVE-2018-14355, CVE-2018-14356,

  CVE-2018-14357, CVE-2018-14358, CVE-2018-14359, CVE-2018-14362

Severity
critical
Lowest
Low
Medium
High
Critical

July 23, 2018

Topics%20covered

Topics Covered

security advisory critical software update remote code execution Ubuntu information exposure Mutt

Package Information

  https://launchpad.net/ubuntu/+source/mutt/1.9.4-3ubuntu0.1
  https://launchpad.net/ubuntu/+source/mutt/1.5.24-1ubuntu0.1
  https://launchpad.net/ubuntu/+source/mutt/1.5.21-6.4ubuntu2.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.