CVE-2026-43864
mutt before 2.3.2 has a show_sig_summary NULL pointer dereference.
Publication Mise à jour
PatchFirst · Vulnérabilités récentes
Vulnérabilités de mutt
Vulnérabilité publiée pour mutt au cours des 30 derniers jours : 0. Dans le catalogue KEV : 0.
Vulnérabilités : 9
CVE-2026-43863
mutt before 2.3.2 has an infinite loop in data_object_to_stream in crypt-gpgme.c.
Publication Mise à jourCVE-2026-43862
In mutt before 2.3.2, the imap_auth_gss security level is mishandled.
Publication Mise à jourCVE-2026-43861
mutt before 2.3.2 does not check for '\0' in url_pct_decode.
Publication Mise à jourCVE-2026-43860
mutt before 2.3.2 sometimes truncates the hash_passwd by one byte for IMAP auth_cram MD5 digest.
Publication Mise à jourCVE-2026-43859
mutt before 2.3.2 sometimes uses strfcpy instead of memcpy for the IMAP auth_cram MD5 digest.
Publication Mise à jourMutt: neomutt: bcc email header field is indirectly leaked by cryptographic info block
In mutt and neomutt, PGP encryption does not use the --hidden-recipient mode which may leak the Bcc email header field by inferring from the recipients info.
Publication Mise à jourMutt: neomutt: in-reply-to email header field it not protected by cryptograpic signing
In mutt and neomutt the In-Reply-To email header field is not protected by cryptographic signing which allows an attacker to reuse an unencrypted but signed email message to impersonate the original sender.
Publication Mise à jourMutt: neomutt: to and cc email header fields are not protected by cryptographic signing
In neomutt and mutt, the To and Cc email headers are not validated by cryptographic signing which allows an attacker that intercepts a message to change their value and include himself as a one of the recipients to compromise message confidentiality.
Publication Mise à jour
Vérifiez votre serveur
Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.