← All advisories

Critical severity9.8NVD Advisory· Published Jul 17, 2018· Updated Jun 17, 2026

CVE-2018-14360

CVE-2018-14360

Description

An issue was discovered in NeoMutt before 2018-07-16. nntp_add_group in newsrc.c has a stack-based buffer overflow because of incorrect sscanf usage.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7

Neomutt/Neomuttllm-fuzzy
Range: < 2018-07-16
osv-coords6 versions
pkg:rpm/opensuse/mutt&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/neomutt&distro=openSUSE%20Tumbleweed pkg:rpm/suse/mutt&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3 pkg:rpm/suse/mutt&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015 pkg:rpm/suse/mutt&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3 pkg:rpm/suse/mutt&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3
< 2.0.7-2.2+ 5 more
- (no CPE)range: < 2.0.7-2.2
- (no CPE)range: < 20210205-3.3
- (no CPE)range: < 1.10.1-55.3.1
- (no CPE)range: < 1.10.1-3.3.4
- (no CPE)range: < 1.10.1-55.3.1
- (no CPE)range: < 1.10.1-55.3.1

Patches

Vulnerability mechanics

References

4

github.com/neomutt/neomutt/commit/6296f7153f0c9d5e5cd3aaf08f9731e56621bdd3nvdPatchThird Party Advisory
lists.debian.org/debian-lts-announce/2018/08/msg00001.htmlnvdMailing ListThird Party Advisory
neomutt.org/2018/07/16/releasenvdRelease NotesVendor Advisory
www.debian.org/security/2018/dsa-4277nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.