CVE-2022-1328 is a buffer overflow vulnerability in the uudecoder component of the Mutt email client, affecting all versions from 0.94.13 up to, but not including, 2.2.3. This flaw allows an attacker to read past the end of an input line, potentially leading to information disclosure. Rated with a CVSS score of 5.3 (Medium), this vulnerability can be exploited remotely with low attack complexity and does not require user interaction or privileges. The primary impact is a potential loss of confidentiality, with no impact on integrity or availability. Currently, there is no evidence of active exploitation, nor is there any publicly available exploit code in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, indicating a low level of public awareness or concern.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 0.94.13, < 2.2.3CPE matchmatch criteria | cpe:2.3:a:mutt:mutt:*:*:*:*:*:*:*:* | ||
9.0CPE matchmatch criteria | cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* | ||
36CPE matchmatch criteria | cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.