The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/command.c mishandles a     NO response without a message. (CVE-2018-14349)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3719-1 advisory.

    It was discovered that Mutt incorrectly handled certain requests. An attacker could possibly use this to     execute arbitrary code. (CVE-2018-14350, CVE-2018-14352, CVE-2018-14354, CVE-2018-14359, CVE-2018-14358,     CVE-2018-14353 ,CVE-2018-14357)

    It was discovered that Mutt incorrectly handled certain inputs. An attacker could possibly use this to     access or expose sensitive information. (CVE-2018-14355, CVE-2018-14356, CVE-2018-14351, CVE-2018-14362,     CVE-2018-14349)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3719-3 advisory.

    USN-3719-1 fixed vulnerabilities in Mutt. Unfortunately, the fixes were not correctly applied to the     packaging for Mutt in Ubuntu 16.04 LTS. This update corrects the oversight.

    We apologize for the inconvenience.



Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for mutt fixes the following issues :

Security issues fixed :

  - bsc#1101428: Mutt 1.10.1 security release update.

  - CVE-2018-14351: Fix imap/command.c that mishandles long     IMAP status mailbox literal count size (bsc#1101583).

  - CVE-2018-14353: Fix imap_quote_string in imap/util.c     that has an integer underflow (bsc#1101581).

  - CVE-2018-14362: Fix pop.c that does not forbid     characters that may have unsafe interaction with     message-cache pathnames (bsc#1101567).

  - CVE-2018-14354: Fix arbitrary command execution from     remote IMAP servers via backquote characters     (bsc#1101578).

  - CVE-2018-14352: Fix imap_quote_string in imap/util.c     that does not leave room for quote characters     (bsc#1101582).

  - CVE-2018-14356: Fix pop.c that mishandles a zero-length     UID (bsc#1101576).

  - CVE-2018-14355: Fix imap/util.c that mishandles '..'     directory traversal in a mailbox name (bsc#1101577).

  - CVE-2018-14349: Fix imap/command.c that mishandles a NO     response without a message (bsc#1101589).

  - CVE-2018-14350: Fix imap/message.c that has a     stack-based buffer overflow for a FETCH response with     along INTERNALDATE field (bsc#1101588).

  - CVE-2018-14363: Fix newsrc.c that does not     properlyrestrict '/' characters that may have unsafe     interaction with cache pathnames (bsc#1101566).

  - CVE-2018-14359: Fix buffer overflow via base64 data     (bsc#1101570).

  - CVE-2018-14358: Fix imap/message.c that has a     stack-based buffer overflow for a FETCH response with     along RFC822.SIZE field (bsc#1101571).

  - CVE-2018-14360: Fix nntp_add_group in newsrc.c that has     a stack-based buffer overflow because of incorrect     sscanf usage (bsc#1101569).

  - CVE-2018-14357: Fix that remote IMAP servers are allowed     to execute arbitrary commands via backquote characters     (bsc#1101573).

  - CVE-2018-14361: Fix that nntp.c proceeds even if memory     allocation fails for messages data (bsc#1101568).

Bug fixes :

  - mutt reports as neomutt and incorrect version     (bsc#1094717)

This update was imported from the SUSE:SLE-15:Update update project.

According to the versions of the mutt package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An issue was discovered in Mutt before 1.10.1 and     NeoMutt before 2018-07-16. imap/command.c mishandles a     NO response without a message.(CVE-2018-14349)

  - An issue was discovered in Mutt before 1.10.1 and     NeoMutt before 2018-07-16. imap/message.c has a     stack-based buffer overflow for a FETCH response with a     long INTERNALDATE field.(CVE-2018-14350)

  - An issue was discovered in Mutt before 1.10.1 and     NeoMutt before 2018-07-16. imap/command.c mishandles a     long IMAP status mailbox literal count     size.(CVE-2018-14351)

  - An issue was discovered in Mutt before 1.10.1 and     NeoMutt before 2018-07-16. imap_quote_string in     imap/util.c does not leave room for quote characters,     leading to a stack-based buffer     overflow.(CVE-2018-14352)

  - An issue was discovered in Mutt before 1.10.1 and     NeoMutt before 2018-07-16. imap/util.c mishandles '..'     directory traversal in a mailbox name.(CVE-2018-14355)

  - An issue was discovered in Mutt before 1.10.1 and     NeoMutt before 2018-07-16. pop.c mishandles a     zero-length UID.(CVE-2018-14356)

  - An issue was discovered in Mutt before 1.10.1 and     NeoMutt before 2018-07-16. imap/message.c has a     stack-based buffer overflow for a FETCH response with a     long RFC822.SIZE field.(CVE-2018-14358)

  - An issue was discovered in Mutt before 1.10.1 and     NeoMutt before 2018-07-16. They have a buffer overflow     via base64 data.(CVE-2018-14359)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7204-1 advisory.

    Jeriko One discovered that NeoMutt incorrectly handled certain IMAP and POP3 responses. An attacker could     possibly use this issue to cause NeoMutt to crash, resulting in a denial of service, or the execution of     arbitrary code. This issue only affected Ubuntu 18.04 LTS. (CVE-2018-14349, CVE-2018-14350,     CVE-2018-14351, CVE-2018-14352, CVE-2018-14353, CVE-2018-14354, CVE-2018-14355, CVE-2018-14356,     CVE-2018-14357, CVE-2018-14358, CVE-2018-14359, CVE-2018-14362)

    Jeriko One discovered that NeoMutt incorrectly handled certain NNTP-related operations. An attacker could     possibly use this issue to cause NeoMutt to crash, resulting in denial of service, or the execution of     arbitrary code. This issue only affected Ubuntu 18.04 LTS. (CVE-2018-14360, CVE-2018-14361,     CVE-2018-14363)

    It was discovered that NeoMutt incorrectly processed additional data when communicating with mail servers.
    An attacker could possibly use this issue to access senstive information. This issue only affected Ubuntu     18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-14954, CVE-2020-28896)

    It was discovered that Neomutt incorrectly handled the IMAP QRSync setting. An attacker could possibly use     this issue to cause NeoMutt to crash, resulting in denial of service. This issue only affected Ubuntu     20.04 LTS. (CVE-2021-32055)

    Tavis Ormandy discovered that NeoMutt incorrectly parsed uuencoded text past the length of the string. An     attacker could possibly use this issue to enable the execution of arbitrary code. This issue only affected     Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-1328)

    It was discovered that NeoMutt did not properly encrypt email headers. An attacker could possibly use this     issue to receive emails that were not intended for them and access sensitive information. This     vulnerability was only fixed in Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS. (CVE-2024-49393,     CVE-2024-49394)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
222176	Linux Distros Unpatched Vulnerability : CVE-2018-14349	Nessus	Misc.	3/4/2025	9/14/2025	critical
111268	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Mutt vulnerabilities (USN-3719-1)	Nessus	Ubuntu Local Security Checks	7/24/2018	8/27/2024	critical
117825	Ubuntu 16.04 LTS : Mutt vulnerabilities (USN-3719-3)	Nessus	Ubuntu Local Security Checks	9/28/2018	10/29/2024	critical
123246	openSUSE Security Update : mutt (openSUSE-2019-569)	Nessus	SuSE Local Security Checks	3/27/2019	6/11/2024	critical
135541	EulerOS 2.0 SP3 : mutt (EulerOS-SA-2020-1412)	Nessus	Huawei Local Security Checks	4/15/2020	3/18/2024	critical
214221	Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : NeoMutt vulnerabilities (USN-7204-1)	Nessus	Ubuntu Local Security Checks	1/15/2025	9/3/2025	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical