rpm package
opensuse/mutt&distro=openSUSE Leap 16.0
pkg:rpm/opensuse/mutt&distro=openSUSE%20Leap%2016.0
Vulnerabilities (6)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-43864 | Low | 2.5 | < 2.2.16-160000.2.1 | 2.2.16-160000.2.1 | May 4, 2026 | mutt before 2.3.2 has a show_sig_summary NULL pointer dereference. | |
| CVE-2026-43863 | Low | 3.7 | < 2.2.16-160000.2.1 | 2.2.16-160000.2.1 | May 4, 2026 | mutt before 2.3.2 has an infinite loop in data_object_to_stream in crypt-gpgme.c. | |
| CVE-2026-43862 | Low | 3.7 | < 2.2.16-160000.2.1 | 2.2.16-160000.2.1 | May 4, 2026 | In mutt before 2.3.2, the imap_auth_gss security level is mishandled. | |
| CVE-2026-43861 | Low | 3.7 | < 2.2.16-160000.2.1 | 2.2.16-160000.2.1 | May 4, 2026 | mutt before 2.3.2 does not check for '\0' in url_pct_decode. | |
| CVE-2026-43860 | Low | 3.7 | < 2.2.16-160000.2.1 | 2.2.16-160000.2.1 | May 4, 2026 | mutt before 2.3.2 sometimes truncates the hash_passwd by one byte for IMAP auth_cram MD5 digest. | |
| CVE-2026-43859 | Low | 3.7 | < 2.2.16-160000.2.1 | 2.2.16-160000.2.1 | May 4, 2026 | mutt before 2.3.2 sometimes uses strfcpy instead of memcpy for the IMAP auth_cram MD5 digest. |
- affected < 2.2.16-160000.2.1fixed 2.2.16-160000.2.1
mutt before 2.3.2 has a show_sig_summary NULL pointer dereference.
- affected < 2.2.16-160000.2.1fixed 2.2.16-160000.2.1
mutt before 2.3.2 has an infinite loop in data_object_to_stream in crypt-gpgme.c.
- affected < 2.2.16-160000.2.1fixed 2.2.16-160000.2.1
In mutt before 2.3.2, the imap_auth_gss security level is mishandled.
- affected < 2.2.16-160000.2.1fixed 2.2.16-160000.2.1
mutt before 2.3.2 does not check for '\0' in url_pct_decode.
- affected < 2.2.16-160000.2.1fixed 2.2.16-160000.2.1
mutt before 2.3.2 sometimes truncates the hash_passwd by one byte for IMAP auth_cram MD5 digest.
- affected < 2.2.16-160000.2.1fixed 2.2.16-160000.2.1
mutt before 2.3.2 sometimes uses strfcpy instead of memcpy for the IMAP auth_cram MD5 digest.