Approved changes feed: RSS · Atom

cpe:2.3:a:mutt:mutt:1.5.23:*:*:*:*:*:*:*

part: a version: 1.5.23 update: *

VendorMutt (8d049cd7-bc69-5f44-93e6-1dbaf65270ac)
ProductMutt (ed9771c9-1df1-58ed-87e5-c8d9add0ea56)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:bitbucket/mutt/mutt purl2cpe 2026-06-01 10:11:48.397378
pkg:deb/debian/mutt purl2cpe 2026-06-01 10:11:48.397379
pkg:deb/ubuntu/mutt purl2cpe 2026-06-01 10:11:48.397381
pkg:github/muttmua/mutt purl2cpe 2026-06-01 10:11:48.397382
pkg:gitlab/muttmua/mutt purl2cpe 2026-06-01 10:11:48.397384
pkg:rpm/fedora/mutt purl2cpe 2026-06-01 10:11:48.397385

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-9116 vulnerable 2026-06-08 05:06:10.914166 Details available
The write_one_header function in mutt 1.5.23 does not properly handle newline characters at the beginning of a header, which allows remote attackers to cause a denial of service (crash) via a header with an empty body, which triggers a heap-based buffer overflow in the mutt_substrdup function.
Published: 2014-12-02T16:00:00.000Z
Updated: 2024-08-06T13:33:13.432Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.