Buffer Overflow in uudecoder in Mutt affecting all versions starting from 0.94.13 before 2.2.3 allows read past end of input line

This plugin has been deprecated as it does not adhere to established standards for this style of check.

The remote CentOS Linux 9 host has a package installed that is affected by a vulnerability as referenced in the mutt-2.2.6-1.el9 build changelog.

  - Buffer Overflow in uudecoder in Mutt affecting all versions starting from 0.94.13 before 2.2.3 allows read     past end of input line (CVE-2022-1328)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:8219 advisory.

  - Buffer Overflow in uudecoder in Mutt affecting all versions starting from 0.94.13 before 2.2.3 allows read     past end of input line (CVE-2022-1328)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of mutt installed on the remote host is prior to 1.5.20-7.20091214hg736b6a.11. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1865 advisory.

    A flaw was found in mutt. When reading unencoded messages, mutt uses the line length from the untrusted     input without any validation. This flaw allows an attacker to craft a malicious message, which leads to an     out-of-bounds read, causing data leaks that include fragments of other unrelated messages. (CVE-2022-1328)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of mutt installed on the remote host is prior to 1.5.21-29. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1892 advisory.

    Mutt before 1.14.3 allows an IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response.
    (CVE-2020-14093)

    Mutt before 1.14.3 proceeds with a connection even if, in response to a GnuTLS certificate prompt, the     user rejects an expired intermediate certificate. (CVE-2020-14154)

    Mutt before 1.14.4 and NeoMutt before 2020-06-19 have a STARTTLS buffering issue that affects IMAP, SMTP,     and POP3. When a server sends a begin TLS response, the client reads additional data (e.g., from a man-     in-the-middle attacker) and evaluates it in a TLS context, aka response injection. (CVE-2020-14954)

    Mutt before 2.0.2 and NeoMutt before 2020-11-20 did not ensure that  was processed if an IMAP server's     initial server response was invalid. The connection was not properly closed, and the code could continue     attempting to authenticate. This could result in authentication credentials being exposed on an     unencrypted connection, or to a machine-in-the-middle. (CVE-2020-28896)

    rfc822.c in Mutt through 2.0.4 allows remote attackers to cause a denial of service (mailbox     unavailability) by sending email messages with sequences of semicolon characters in RFC822 address fields     (aka terminators of empty groups). A small email message from the attacker can cause large memory     consumption, and the victim may then be unable to see email messages from other persons. (CVE-2021-3181)

    A flaw was found in mutt. When reading unencoded messages, mutt uses the line length from the untrusted     input without any validation. This flaw allows an attacker to craft a malicious message, which leads to an     out-of-bounds read, causing data leaks that include fragments of other unrelated messages. (CVE-2022-1328)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2022-8219 advisory.

    [5:2.2.6-1]
    - Rebase to upstream version 2.2.6       Resolves: CVE-2022-1328

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2022:8219 advisory.

  - Buffer Overflow in uudecoder in Mutt affecting all versions starting from 0.94.13 before 2.2.3 allows read     past end of input line (CVE-2022-1328)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:7640 advisory.

  - Buffer Overflow in uudecoder in Mutt affecting all versions starting from 0.94.13 before 2.2.3 allows read     past end of input line (CVE-2022-1328)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2022:8219 advisory.

    Mutt is a low resource, highly configurable, text-based MIME e-mail client. Mutt supports most e-mail     storing formats, such as mbox and Maildir, as well as most protocols, including POP3 and IMAP.

    Security Fix(es):

    * mutt: buffer overflow in uudecoder function (CVE-2022-1328)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.1 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2022-7640 advisory.

    [5:2.0.7-2]
    - Fix CVE-2022-1328 (#2109247)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2022:7640 advisory.

  - Buffer Overflow in uudecoder in Mutt affecting all versions starting from 0.94.13 before 2.2.3 allows read     past end of input line (CVE-2022-1328)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2022:7640 advisory.

  - mutt: buffer overflow in uudecoder function (CVE-2022-1328)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2022:7640 advisory.

    Mutt is a low resource, highly configurable, text-based MIME e-mail client. Mutt supports most e-mail     storing formats, such as mbox and Maildir, as well as most protocols, including POP3 and IMAP.

    Security Fix(es):

    * mutt: buffer overflow in uudecoder function (CVE-2022-1328)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.7 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the mutt package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Buffer Overflow in uudecoder in Mutt affecting all versions starting from 0.94.13 before 2.2.3 allows read     past end of input line (CVE-2022-1328)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-2999 advisory.

  - Buffer Overflow in uudecoder in Mutt affecting all versions starting from 0.94.13 before 2.2.3 allows read     past end of input line (CVE-2022-1328)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:1478-1 advisory.

  - Buffer Overflow in uudecoder in Mutt affecting all versions starting from 0.94.13 before 2.2.3 allows read     past end of input line (CVE-2022-1328)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5392-1 advisory.

    It was discovered that Mutt incorrectly handled certain requests. An attacker could possibly use this     issue to expose sensitive information. This issue only affected Ubuntu 20.04 LTS. (CVE-2021-32055)

    It was discovered that Mutt incorrectly handled certain input. An attacker could possibly use this issue     to cause a crash, or expose sensitive information. (CVE-2022-1328)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:1376-1 advisory.

  - Buffer Overflow in uudecoder in Mutt affecting all versions starting from 0.94.13 before 2.2.3 allows read     past end of input line (CVE-2022-1328)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 6eb9cf14-bab0-11ec-8f59-4437e6ad11c4 advisory.

  - Buffer Overflow in uudecoder in Mutt affecting all versions starting from 0.94.13 before 2.2.3 allows read     past end of input line (CVE-2022-1328)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
196564	RHEL 6 : mutt (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	critical
196517	RHEL 7 : mutt (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	critical
191229	CentOS 9 : mutt-2.2.6-1.el9	Nessus	CentOS Local Security Checks	medium
184631	Rocky Linux 9 : mutt (RLSA-2022:8219)	Nessus	Rocky Linux Local Security Checks	medium
183850	Amazon Linux AMI : mutt (ALAS-2023-1865)	Nessus	Amazon Linux Local Security Checks	medium
168438	Amazon Linux 2 : mutt (ALAS-2022-1892)	Nessus	Amazon Linux Local Security Checks	medium
168061	Oracle Linux 9 : mutt (ELSA-2022-8219)	Nessus	Oracle Linux Local Security Checks	medium
167959	AlmaLinux 9 : mutt (ALSA-2022:8219)	Nessus	Alma Linux Local Security Checks	medium
167831	Rocky Linux 8 : mutt (RLSA-2022:7640)	Nessus	Rocky Linux Local Security Checks	medium
167610	RHEL 9 : mutt (RHSA-2022:8219)	Nessus	Red Hat Local Security Checks	medium
167536	Oracle Linux 8 : mutt (ELSA-2022-7640)	Nessus	Oracle Linux Local Security Checks	medium
167305	AlmaLinux 8 : mutt (ALSA-2022:7640)	Nessus	Alma Linux Local Security Checks	medium
167187	CentOS 8 : mutt (CESA-2022:7640)	Nessus	CentOS Local Security Checks	medium
167124	RHEL 8 : mutt (RHSA-2022:7640)	Nessus	Red Hat Local Security Checks	medium
163566	EulerOS 2.0 SP10 : mutt (EulerOS-SA-2022-2163)	Nessus	Huawei Local Security Checks	medium
163536	EulerOS 2.0 SP10 : mutt (EulerOS-SA-2022-2138)	Nessus	Huawei Local Security Checks	medium
162366	EulerOS 2.0 SP5 : mutt (EulerOS-SA-2022-1904)	Nessus	Huawei Local Security Checks	medium
160971	Debian DLA-2999-1 : mutt - LTS security update	Nessus	Debian Local Security Checks	medium
160382	SUSE SLES12 Security Update : mutt (SUSE-SU-2022:1478-1)	Nessus	SuSE Local Security Checks	medium
160290	Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : Mutt vulnerabilities (USN-5392-1)	Nessus	Ubuntu Local Security Checks	critical
160195	SUSE SLED15 / SLES15 Security Update : mutt (SUSE-SU-2022:1376-1)	Nessus	SuSE Local Security Checks	medium
159765	FreeBSD : mutt -- mutt_decode_uuencoded() can read past the of the input line (6eb9cf14-bab0-11ec-8f59-4437e6ad11c4)	Nessus	FreeBSD Local Security Checks	medium

Detections

Analytics

CVE-2022-1328

medium

Tenable Plugins

critical

critical

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

critical

medium

medium