Описание
In mutt and neomutt the In-Reply-To email header field is not protected by cryptographic signing which allows an attacker to reuse an unencrypted but signed email message to impersonate the original sender.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | ignored | no fix planned |
| esm-infra-legacy/xenial | ignored | no fix planned |
| esm-infra/bionic | ignored | no fix planned |
| esm-infra/focal | ignored | no fix planned |
| esm-infra/xenial | ignored | end of ESM support, was ignored [no fix planned] |
| focal | ignored | end of standard support, was ignored [no fix planned] |
| jammy | ignored | no fix planned |
| noble | ignored | no fix planned |
| oracular | ignored | end of life, was ignored [no fix planned] |
| plucky | ignored | end of life, was ignored [no fix planned] |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 20241002+dfsg-1 |
| esm-apps/bionic | ignored | changes too intrusive |
| esm-apps/focal | released | 20191207+dfsg.1-1.1ubuntu0.1~esm1 |
| esm-apps/jammy | released | 20211029+dfsg1-1ubuntu0.1~esm1 |
| esm-apps/noble | released | 20231103+dfsg1-1ubuntu0.1~esm1 |
| esm-apps/resolute | not-affected | 20241002+dfsg-1 |
| focal | ignored | end of standard support, was needed |
| jammy | needed | |
| noble | needed | |
| oracular | ignored | end of life, was needed |
Показывать по
Ссылки на источники
EPSS
5.3 Medium
CVSS3
Связанные уязвимости
In mutt and neomutt the In-Reply-To email header field is not protected by cryptographic signing which allows an attacker to reuse an unencrypted but signed email message to impersonate the original sender.
In mutt and neomutt the In-Reply-To email header field is not protected by cryptographic signing which allows an attacker to reuse an unencrypted but signed email message to impersonate the original sender.
In mutt and neomutt the In-Reply-To email header field is not protecte ...
In mutt and neomutt the In-Reply-To email header field is not protected by cryptographic signing which allows an attacker to reuse an unencrypted but signed email message to impersonate the original sender.
EPSS
5.3 Medium
CVSS3