Neomutt
Vendor:
First CVE: Jul 17, 2018 · Active for 8 years
21
Total CVEs
More Total CVEs than 94% of tracked products
5.3
Avg CVEs / Year
Higher CVE frequency than 89% of tracked products
8.5
Avg CVSS
Higher Avg CVSS than 75% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Neomutt over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jul 17, 2018
8 years ago
Most Recent CVE
Nov 12, 2024
619 days ago
CVE Severity & Scoring
Neomutt21 CVEs
29%
67%
All CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network21 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low18 (85.7%)
High3 (14.3%)
Unknown0 (0.0%)
User Interaction
None20 (95.2%)
Unknown0 (0.0%)
Required1 (4.8%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None21 (100.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (21 CVEs).
21 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2018-14361CRITICAL An issue was discovered in NeoMutt before 2018-07-16. nntp.c proceeds even if memory allocation fails for messages data. | Jul 17, 2018 | 9.8 | 31 | NO | NO |
CVE-2018-14359CRITICAL An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They have a buffer overflow via base64 data. | Jul 17, 2018 | 9.8 | 31 | NO | NO |
CVE-2018-14356CRITICAL An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c mishandles a zero-length UID. | Jul 17, 2018 | 9.8 | 31 | NO | NO |
CVE-2018-14354CRITICAL An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the m | Jul 17, 2018 | 9.8 | 31 | NO | NO |
CVE-2018-14350CRITICAL An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer overflow for a FETCH response with a long INTERNALDATE field. | Jul 17, 2018 | 9.8 | 31 | NO | NO |
CVE-2018-14362CRITICAL An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not forbid characters that may have unsafe interaction with message-cache pathnames, as demo | Jul 17, 2018 | 9.8 | 30 | NO | NO |
CVE-2018-14360CRITICAL An issue was discovered in NeoMutt before 2018-07-16. nntp_add_group in newsrc.c has a stack-based buffer overflow because of incorrect sscanf usage. | Jul 17, 2018 | 9.8 | 30 | NO | NO |
CVE-2018-14358CRITICAL An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer overflow for a FETCH response with a long RFC822.SIZE field. | Jul 17, 2018 | 9.8 | 30 | NO | NO |
CVE-2018-14357CRITICAL An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the m | Jul 17, 2018 | 9.8 | 30 | NO | NO |
CVE-2018-14353CRITICAL An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in imap/util.c has an integer underflow. | Jul 17, 2018 | 9.8 | 30 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (21 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (21 CVEs).
Media Mentions
Signals from CVEs in this product scope (21 CVEs).
Top CNAs Publishing CVEs For Neomutt
Top CWEs
Versions
No cataloged versions.