mutt (AlmaLinux:8) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the AlmaLinux:8 package mutt, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (5)

• CVE-2021-3181 — CVSS 6.5 (medium): rfc822.c in Mutt through 2.0.4 allows remote attackers to cause a denial of service (mailbox unavailability) by sending email messages with…
• CVE-2020-28896 — CVSS 5.3 (medium): Mutt before 2.0.2 and NeoMutt before 2020-11-20 did not ensure that $ssl_force_tls was processed if an IMAP server's initial server…
• CVE-2022-1328 — CVSS 4.3 (medium): Buffer Overflow in uudecoder in Mutt affecting all versions starting from 0.94.13 before 2.2.3 allows read past end of input line
• CVE-2023-4874 — CVSS 4.3 (medium): Null pointer dereference when viewing a specially crafted email in Mutt >1.5.2 <2.2.12
• CVE-2023-4875 — CVSS 2.2 (low): Null pointer dereference when composing from a specially crafted draft message in Mutt >1.5.2 <2.2.12