CVE-2014-0467

Description

Buffer overflow in copy.c in Mutt before 1.5.23 allows remote attackers to cause a denial of service (crash) via a crafted RFC2047 header line, related to address expansion.

Risk Information

Base Score

9.8

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

1.816

Associated Vulnerability

Vulnerability	OS Platform
text-based mailreader supporting MIME, GPG, PGP and threading (USN-2147-1) mutt_1.5.21-5ubuntu2.2_i386.deb	Linux
text-based mailreader supporting MIME, GPG, PGP and threading (USN-2147-1) mutt_1.5.21-5ubuntu2.2_amd64.deb	Linux
text-based mailreader supporting MIME, GPG, PGP and threading (USN-2147-1) mutt-patched_1.5.21-5ubuntu2.2_i386.deb	Linux
text-based mailreader supporting MIME, GPG, PGP and threading (USN-2147-1) mutt-patched_1.5.21-5ubuntu2.2_amd64.deb	Linux
mutt security update(DSA-3083-1) mutt_1.5.21-6.2+deb7u3_i386.deb	Linux
(RHSA-2014:0304) Important: mutt security update mutt-1.5.20-4.20091214hg736b6a.el6_5.i686.rpm	Linux
(RHSA-2014:0304) Important: mutt security update mutt-1.5.20-4.20091214hg736b6a.el6_5.x86_64.rpm	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234