Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2021:0195-1

Опубликовано: 22 янв. 2021
Источник: suse-cvrf

Описание

Security update for mutt

This update for mutt fixes the following issue:

  • CVE-2021-3181: Fixed a memory leak in recipient parsing (bsc#1181221).

Список пакетов

SUSE Linux Enterprise Module for Basesystem 15 SP2
mutt-1.10.1-3.20.1
mutt-doc-1.10.1-3.20.1
mutt-lang-1.10.1-3.20.1

Ссылки

Описание

rfc822.c in Mutt through 2.0.4 allows remote attackers to cause a denial of service (mailbox unavailability) by sending email messages with sequences of semicolon characters in RFC822 address fields (aka terminators of empty groups). A small email message from the attacker can cause large memory consumption, and the victim may then be unable to see email messages from other persons.

Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP2:mutt-1.10.1-3.20.1
SUSE Linux Enterprise Module for Basesystem 15 SP2:mutt-doc-1.10.1-3.20.1
SUSE Linux Enterprise Module for Basesystem 15 SP2:mutt-lang-1.10.1-3.20.1
Ссылки