PT-2014-8835 · Mutt+2 · Mutt+2
Publicado
2014-12-02
·
Atualizado
2024-06-15
·
CVE-2014-9116
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
mutt version 1.5.23
Description
The issue is related to the improper handling of newline characters at the beginning of a header by the
write one header function, which can be exploited by remote attackers to cause a denial of service (crash) via a header with an empty body. This triggers a heap-based buffer overflow in the mutt substrdup function.Recommendations
For mutt version 1.5.23, consider applying a patch or fix that properly handles newline characters at the beginning of a header to prevent the heap-based buffer overflow in the
mutt substrdup function. As a temporary workaround, restrict the processing of headers with empty bodies to minimize the risk of exploitation.Exploit
Correção
DoS
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Suse
Ubuntu
Mutt