远程 CentOS Linux 8 主机上安装的一个程序包受到 CESA-2024:3058 公告中提及的多个漏洞影响。

  - 在 Mutt >1.5.2 <2.2.12 中查看特别构建的电子邮件时发生空指针取消引用 (CVE-2023-4874)

  - 在 Mutt >1.5.2 <2.2.12 中根据特别构建的电子邮件撰写内容时发生空指针取消引用 (CVE-2023-4875)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

远程 Debian 11/12 主机上安装的一个程序包受到 dsa-5494 公告中提及的多个漏洞影响。

  - 在 Mutt >1.5.2 <2.2.12 中查看特别构建的电子邮件时发生空指针取消引用 (CVE-2023-4874)

  - 在 Mutt >1.5.2 <2.2.12 中根据特别构建的电子邮件撰写内容时发生空指针取消引用 (CVE-2023-4875)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

远程 Debian 10 主机上安装的一个程序包受到 dla-3574 公告中提及的多个漏洞影响。

  - 在 Mutt >1.5.2 <2.2.12 中查看特别构建的电子邮件时发生空指针取消引用 (CVE-2023-4874)

  - 在 Mutt >1.5.2 <2.2.12 中根据特别构建的电子邮件撰写内容时发生空指针取消引用 (CVE-2023-4875)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

远程主机上安装的 mutt 版本低于 1.5.21-29。因此，它受到公告 ALAS2-2023-2265 中提及的多个漏洞影响。

  - 在 Mutt >1.5.2 <2.2.12 中查看特别构建的电子邮件时发生空指针取消引用 (CVE-2023-4874)

  - 在 Mutt >1.5.2 <2.2.12 中根据特别构建的电子邮件撰写内容时发生空指针取消引用 (CVE-2023-4875)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

远程主机上安装的 mutt 版本低于 1.5.20-7.20091214hg736b6a.10。因此，它受到 ALAS-2023-1836 公告中提及的多个漏洞影响。

  - 在 Mutt >1.5.2 <2.2.12 中查看特别构建的电子邮件时发生空指针取消引用 (CVE-2023-4874)

  - 在 Mutt >1.5.2 <2.2.12 中根据特别构建的电子邮件撰写内容时发生空指针取消引用 (CVE-2023-4875)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

According to the versions of the mutt package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Null pointer dereference when viewing a specially crafted email in Mutt >1.5.2 <2.2.12 (CVE-2023-4874)

  - Null pointer dereference when composing from a specially crafted draft message in Mutt >1.5.2 <2.2.12     (CVE-2023-4875)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote SUSE Linux SLES12 / SLES_SAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3702-1 advisory.

  - Null pointer dereference when viewing a specially crafted email in Mutt >1.5.2 <2.2.12 (CVE-2023-4874)

  - Null pointer dereference when composing from a specially crafted draft message in Mutt >1.5.2 <2.2.12     (CVE-2023-4875)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-357 advisory.

    Null pointer dereference when viewing a specially crafted email in Mutt >1.5.2 <2.2.12 (CVE-2023-4874)

    Null pointer dereference when composing from a specially crafted draft message in Mutt >1.5.2 <2.2.12     (CVE-2023-4875)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 23.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6374-2 advisory.

    USN-6374-1 fixed vulnerabilities in Mutt. This update provides the corresponding updates for Ubuntu 23.10.



Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2024-3058 advisory.

    - Fix for: CVE-2023-4874 CVE-2023-4875

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2024:3058 advisory.

  - Null pointer dereference when viewing a specially crafted email in Mutt >1.5.2 <2.2.12 (CVE-2023-4874)

  - Null pointer dereference when composing from a specially crafted draft message in Mutt >1.5.2 <2.2.12     (CVE-2023-4875)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
197684	CentOS 8：mutt (CESA-2024:3058)	Nessus	CentOS Local Security Checks	5/22/2024	5/22/2024	medium
181212	Debian DSA-5494-1：mutt - 安全更新	Nessus	Debian Local Security Checks	9/11/2023	1/24/2025	medium
181696	Debian DLA-3574-1：mutt - LTS 安全更新	Nessus	Debian Local Security Checks	9/20/2023	1/22/2025	medium
182643	Amazon Linux 2：mutt (ALAS-2023-2265)	Nessus	Amazon Linux Local Security Checks	10/5/2023	12/11/2024	medium
182704	Amazon Linux AMI：mutt (ALAS-2023-1836)	Nessus	Amazon Linux Local Security Checks	10/6/2023	12/11/2024	medium
189064	EulerOS 2.0 SP10 : mutt (EulerOS-SA-2023-3187)	Nessus	Huawei Local Security Checks	1/16/2024	1/16/2024	medium
188767	EulerOS 2.0 SP11 : mutt (EulerOS-SA-2023-3280)	Nessus	Huawei Local Security Checks	1/16/2024	1/16/2024	medium
181750	SUSE SLES12 Security Update : mutt (SUSE-SU-2023:3702-1)	Nessus	SuSE Local Security Checks	9/21/2023	9/21/2023	medium
182445	Amazon Linux 2023 : mutt (ALAS2023-2023-357)	Nessus	Amazon Linux Local Security Checks	10/3/2023	12/11/2024	medium
183427	Ubuntu 23.10 : Mutt vulnerabilities (USN-6374-2)	Nessus	Ubuntu Local Security Checks	10/19/2023	10/29/2024	medium
190315	EulerOS 2.0 SP5 : mutt (EulerOS-SA-2024-1153)	Nessus	Huawei Local Security Checks	2/8/2024	2/8/2024	medium
198017	Oracle Linux 8 : mutt (ELSA-2024-3058)	Nessus	Oracle Linux Local Security Checks	5/28/2024	9/21/2024	medium
197684	CentOS 8 : mutt (CESA-2024:3058)	Nessus	CentOS Local Security Checks	5/22/2024	5/22/2024	medium

Detections

Analytics

Plugins Search

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium