CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-14362

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not forbid characters that may have unsafe interaction with message-cache pathnames, as demonstrated by a '/' character.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.056

EPSS Ranking 89.8%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

References

Products affected by CVE-2018-14362

Mutt » Mutt » Version: 1.5

cpe:2.3:a:mutt:mutt:1.5
Mutt » Mutt » Version: 1.5.1

cpe:2.3:a:mutt:mutt:1.5.1
Mutt » Mutt » Version: 1.5.10

cpe:2.3:a:mutt:mutt:1.5.10
Mutt » Mutt » Version: 1.5.11

cpe:2.3:a:mutt:mutt:1.5.11
Mutt » Mutt » Version: 1.5.12

cpe:2.3:a:mutt:mutt:1.5.12
Mutt » Mutt » Version: 1.5.13

cpe:2.3:a:mutt:mutt:1.5.13
Mutt » Mutt » Version: 1.5.14

cpe:2.3:a:mutt:mutt:1.5.14
Mutt » Mutt » Version: 1.5.15

cpe:2.3:a:mutt:mutt:1.5.15
Mutt » Mutt » Version: 1.5.16

cpe:2.3:a:mutt:mutt:1.5.16
Mutt » Mutt » Version: 1.5.17

cpe:2.3:a:mutt:mutt:1.5.17
Mutt » Mutt » Version: 1.5.18

cpe:2.3:a:mutt:mutt:1.5.18
Mutt » Mutt » Version: 1.5.19

cpe:2.3:a:mutt:mutt:1.5.19
Mutt » Mutt » Version: 1.5.2

cpe:2.3:a:mutt:mutt:1.5.2
Mutt » Mutt » Version: 1.5.20

cpe:2.3:a:mutt:mutt:1.5.20
Mutt » Mutt » Version: 1.5.20-7

cpe:2.3:a:mutt:mutt:1.5.20-7
Mutt » Mutt » Version: 1.5.21

cpe:2.3:a:mutt:mutt:1.5.21
Mutt » Mutt » Version: 1.5.22

cpe:2.3:a:mutt:mutt:1.5.22
Mutt » Mutt » Version: 1.5.3

cpe:2.3:a:mutt:mutt:1.5.3
Mutt » Mutt » Version: 1.5.4

cpe:2.3:a:mutt:mutt:1.5.4
Mutt » Mutt » Version: 1.5.5

cpe:2.3:a:mutt:mutt:1.5.5
Mutt » Mutt » Version: 1.5.6

cpe:2.3:a:mutt:mutt:1.5.6
Mutt » Mutt » Version: 1.5.7

cpe:2.3:a:mutt:mutt:1.5.7
Mutt » Mutt » Version: 1.5.8

cpe:2.3:a:mutt:mutt:1.5.8
Mutt » Mutt » Version: 1.5.9

cpe:2.3:a:mutt:mutt:1.5.9
Neomutt » Neomutt » Version: 20160307

cpe:2.3:a:neomutt:neomutt:20160307
Neomutt » Neomutt » Version: 20160317

cpe:2.3:a:neomutt:neomutt:20160317
Neomutt » Neomutt » Version: 20160320

cpe:2.3:a:neomutt:neomutt:20160320
Neomutt » Neomutt » Version: 20160328

cpe:2.3:a:neomutt:neomutt:20160328
Neomutt » Neomutt » Version: 20160404

cpe:2.3:a:neomutt:neomutt:20160404
Neomutt » Neomutt » Version: 20160416

cpe:2.3:a:neomutt:neomutt:20160416
Neomutt » Neomutt » Version: 20160502

cpe:2.3:a:neomutt:neomutt:20160502
Neomutt » Neomutt » Version: 20160530

cpe:2.3:a:neomutt:neomutt:20160530
Neomutt » Neomutt » Version: 20160611

cpe:2.3:a:neomutt:neomutt:20160611
Neomutt » Neomutt » Version: 20160709

cpe:2.3:a:neomutt:neomutt:20160709
Neomutt » Neomutt » Version: 20160723

cpe:2.3:a:neomutt:neomutt:20160723
Neomutt » Neomutt » Version: 20160808

cpe:2.3:a:neomutt:neomutt:20160808
Neomutt » Neomutt » Version: 20160821

cpe:2.3:a:neomutt:neomutt:20160821
Neomutt » Neomutt » Version: 20160822

cpe:2.3:a:neomutt:neomutt:20160822
Neomutt » Neomutt » Version: 20160826

cpe:2.3:a:neomutt:neomutt:20160826
Neomutt » Neomutt » Version: 20160827

cpe:2.3:a:neomutt:neomutt:20160827
Neomutt » Neomutt » Version: 20160910

cpe:2.3:a:neomutt:neomutt:20160910
Neomutt » Neomutt » Version: 20160916

cpe:2.3:a:neomutt:neomutt:20160916
Neomutt » Neomutt » Version: 20161002

cpe:2.3:a:neomutt:neomutt:20161002
Neomutt » Neomutt » Version: 20161003

cpe:2.3:a:neomutt:neomutt:20161003
Neomutt » Neomutt » Version: 20161014

cpe:2.3:a:neomutt:neomutt:20161014
Neomutt » Neomutt » Version: 20161028

cpe:2.3:a:neomutt:neomutt:20161028
Neomutt » Neomutt » Version: 20161104

cpe:2.3:a:neomutt:neomutt:20161104
Neomutt » Neomutt » Version: 20161126

cpe:2.3:a:neomutt:neomutt:20161126
Neomutt » Neomutt » Version: 20170113

cpe:2.3:a:neomutt:neomutt:20170113
Neomutt » Neomutt » Version: 20170128

cpe:2.3:a:neomutt:neomutt:20170128
Neomutt » Neomutt » Version: 20170206

cpe:2.3:a:neomutt:neomutt:20170206
Neomutt » Neomutt » Version: 20170225

cpe:2.3:a:neomutt:neomutt:20170225
Neomutt » Neomutt » Version: 20170306

cpe:2.3:a:neomutt:neomutt:20170306
Neomutt » Neomutt » Version: 20170414

cpe:2.3:a:neomutt:neomutt:20170414
Neomutt » Neomutt » Version: 20170421

cpe:2.3:a:neomutt:neomutt:20170421
Neomutt » Neomutt » Version: 20170428

cpe:2.3:a:neomutt:neomutt:20170428
Neomutt » Neomutt » Version: 20170526

cpe:2.3:a:neomutt:neomutt:20170526
Neomutt » Neomutt » Version: 20170602

cpe:2.3:a:neomutt:neomutt:20170602
Neomutt » Neomutt » Version: 20170609

cpe:2.3:a:neomutt:neomutt:20170609
Neomutt » Neomutt » Version: 20170707

cpe:2.3:a:neomutt:neomutt:20170707
Neomutt » Neomutt » Version: 20170714

cpe:2.3:a:neomutt:neomutt:20170714
Neomutt » Neomutt » Version: 20170907

cpe:2.3:a:neomutt:neomutt:20170907
Neomutt » Neomutt » Version: 20170912

cpe:2.3:a:neomutt:neomutt:20170912
Neomutt » Neomutt » Version: 20171006

cpe:2.3:a:neomutt:neomutt:20171006
Neomutt » Neomutt » Version: 20171013

cpe:2.3:a:neomutt:neomutt:20171013
Neomutt » Neomutt » Version: 20171027

cpe:2.3:a:neomutt:neomutt:20171027
Neomutt » Neomutt » Version: 20171208

cpe:2.3:a:neomutt:neomutt:20171208
Neomutt » Neomutt » Version: 20171215

cpe:2.3:a:neomutt:neomutt:20171215
Neomutt » Neomutt » Version: 20180223

cpe:2.3:a:neomutt:neomutt:20180223
Neomutt » Neomutt » Version: 20180323

cpe:2.3:a:neomutt:neomutt:20180323
Neomutt » Neomutt » Version: 20180512

cpe:2.3:a:neomutt:neomutt:20180512
Neomutt » Neomutt » Version: 20180622

cpe:2.3:a:neomutt:neomutt:20180622
Neomutt » Neomutt » Version: 2019-10-25

cpe:2.3:a:neomutt:neomutt:2019-10-25
Neomutt » Neomutt » Version: 2020-11-20

cpe:2.3:a:neomutt:neomutt:2020-11-20
Canonical » Ubuntu Linux » Version: 16.04

cpe:2.3:o:canonical:ubuntu_linux:16.04
Debian » Debian Linux » Version: 8.0

cpe:2.3:o:debian:debian_linux:8.0
Debian » Debian Linux » Version: 9.0

cpe:2.3:o:debian:debian_linux:9.0
Redhat » Enterprise Linux Desktop » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0
Redhat » Enterprise Linux Desktop » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0
Redhat » Enterprise Linux Server » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_server:6.0
Redhat » Enterprise Linux Server » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_server:7.0
Redhat » Enterprise Linux Server Aus » Version: 7.6

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6
Redhat » Enterprise Linux Server Aus » Version: 7.7

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7
Redhat » Enterprise Linux Server Eus » Version: 7.5

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5
Redhat » Enterprise Linux Server Eus » Version: 7.6

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6
Redhat » Enterprise Linux Server Eus » Version: 7.7

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.7
Redhat » Enterprise Linux Server Tus » Version: 7.6

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6
Redhat » Enterprise Linux Server Tus » Version: 7.7

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7
Redhat » Enterprise Linux Workstation » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_workstation:6.0
Redhat » Enterprise Linux Workstation » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-14362

Products

Pricing

Contact Us