Vulnerability Details CVE-2021-32055
Mutt 1.11.0 through 2.0.x before 2.0.7 (and NeoMutt 2019-10-25 through 2021-05-04) has a $imap_qresync issue in which imap/util.c has an out-of-bounds read in situations where an IMAP sequence set ends with a comma. NOTE: the $imap_qresync setting for QRESYNC is not enabled by default.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 60.5%
CVSS Severity
CVSS v3 Score 9.1
CVSS v2 Score 5.8
Products affected by CVE-2021-32055
-
cpe:2.3:a:mutt:mutt:1.11.0
-
cpe:2.3:a:mutt:mutt:1.11.1
-
cpe:2.3:a:mutt:mutt:1.11.2
-
cpe:2.3:a:mutt:mutt:1.11.3
-
cpe:2.3:a:mutt:mutt:1.11.4
-
cpe:2.3:a:mutt:mutt:1.12.0
-
cpe:2.3:a:mutt:mutt:1.12.1
-
cpe:2.3:a:mutt:mutt:1.12.2
-
cpe:2.3:a:mutt:mutt:1.13.0
-
cpe:2.3:a:mutt:mutt:1.13.1
-
cpe:2.3:a:mutt:mutt:1.13.2
-
cpe:2.3:a:mutt:mutt:1.13.3
-
cpe:2.3:a:mutt:mutt:1.13.4
-
cpe:2.3:a:mutt:mutt:1.13.5
-
cpe:2.3:a:mutt:mutt:1.14.0
-
cpe:2.3:a:mutt:mutt:1.14.1
-
cpe:2.3:a:mutt:mutt:1.14.2
-
cpe:2.3:a:mutt:mutt:1.14.3
-
cpe:2.3:a:mutt:mutt:1.14.4
-
cpe:2.3:a:mutt:mutt:1.14.5
-
cpe:2.3:a:mutt:mutt:1.14.6
-
cpe:2.3:a:mutt:mutt:1.14.7
-
cpe:2.3:a:mutt:mutt:2.0.0
-
cpe:2.3:a:mutt:mutt:2.0.1
-
cpe:2.3:a:mutt:mutt:2.0.2
-
cpe:2.3:a:mutt:mutt:2.0.3
-
cpe:2.3:a:mutt:mutt:2.0.4
-
cpe:2.3:a:mutt:mutt:2.0.5
-
cpe:2.3:a:mutt:mutt:2.0.6
-
cpe:2.3:a:neomutt:neomutt:20191025
-
cpe:2.3:a:neomutt:neomutt:20191102
-
cpe:2.3:a:neomutt:neomutt:20191111
-
cpe:2.3:a:neomutt:neomutt:20191129
-
cpe:2.3:a:neomutt:neomutt:20191207
-
cpe:2.3:a:neomutt:neomutt:20200313
-
cpe:2.3:a:neomutt:neomutt:20200320
-
cpe:2.3:a:neomutt:neomutt:20200417
-
cpe:2.3:a:neomutt:neomutt:20200424
-
cpe:2.3:a:neomutt:neomutt:20200501
-
cpe:2.3:a:neomutt:neomutt:20200619
-
cpe:2.3:a:neomutt:neomutt:20200626
-
cpe:2.3:a:neomutt:neomutt:20200807
-
cpe:2.3:a:neomutt:neomutt:20200814
-
cpe:2.3:a:neomutt:neomutt:20200821
-
cpe:2.3:a:neomutt:neomutt:20200925
-
cpe:2.3:a:neomutt:neomutt:20201120
-
cpe:2.3:a:neomutt:neomutt:20201127
-
cpe:2.3:a:neomutt:neomutt:20210205
-
cpe:2.3:a:neomutt:neomutt:20210504