Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-32055

Опубликовано: 05 мая 2021
Источник: nvd
CVSS3: 9.1
CVSS2: 5.8
EPSS Низкий

Описание

Mutt 1.11.0 through 2.0.x before 2.0.7 (and NeoMutt 2019-10-25 through 2021-05-04) has a $imap_qresync issue in which imap/util.c has an out-of-bounds read in situations where an IMAP sequence set ends with a comma. NOTE: the $imap_qresync setting for QRESYNC is not enabled by default.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mutt:mutt:*:*:*:*:*:*:*:*
Версия от 1.11.0 (включая) до 2.0.7 (исключая)
cpe:2.3:a:neomutt:neomutt:*:*:*:*:*:*:*:*
Версия от 20191025 (включая) до 20210504 (включая)

EPSS

Процентиль: 67%
0.00534
Низкий

9.1 Critical

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 9.1
ubuntu
почти 5 лет назад

Mutt 1.11.0 through 2.0.x before 2.0.7 (and NeoMutt 2019-10-25 through 2021-05-04) has a $imap_qresync issue in which imap/util.c has an out-of-bounds read in situations where an IMAP sequence set ends with a comma. NOTE: the $imap_qresync setting for QRESYNC is not enabled by default.

CVSS3: 9.1
redhat
почти 5 лет назад

Mutt 1.11.0 through 2.0.x before 2.0.7 (and NeoMutt 2019-10-25 through 2021-05-04) has a $imap_qresync issue in which imap/util.c has an out-of-bounds read in situations where an IMAP sequence set ends with a comma. NOTE: the $imap_qresync setting for QRESYNC is not enabled by default.

CVSS3: 9.1
msrc
около 4 лет назад

Описание отсутствует

CVSS3: 9.1
debian
почти 5 лет назад

Mutt 1.11.0 through 2.0.x before 2.0.7 (and NeoMutt 2019-10-25 through ...

github
больше 3 лет назад

Mutt 1.11.0 through 2.0.x before 2.0.7 (and NeoMutt 2019-10-25 through 2021-05-04) has a $imap_qresync issue in which imap/util.c has an out-of-bounds read in situations where an IMAP sequence set ends with a comma. NOTE: the $imap_qresync setting for QRESYNC is not enabled by default.

EPSS

Процентиль: 67%
0.00534
Низкий

9.1 Critical

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-125