PT-2022-3657

CVE-2022-1328

·

Published

2022-04-05

·

Updated

2026-10-31

Description by

CVSS 3.1
5.3
Medium
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions Mutt versions 0.94.13 through 2.2.3
Description The issue is related to a buffer overflow in the mutt decode uuencoded() function of the Mutt email client. This can allow a remote attacker to gain unauthorized access to protected information or cause a denial of service. The problem arises from the function reading past the end of an input line.
Recommendations For versions 0.94.13 through 2.2.3, update to version 2.2.3 or later to resolve the issue. As a temporary workaround, consider disabling the mutt decode uuencoded() function until a patch is available.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALSA-2022:7640
ALSA-2022_7640
ALSA-2022:8219
ALSA-2022_8219
AZL-9472
CESA-2022_7640
CLEANSTART-2024-RU16942
DLA-2999-1
MGASA-2023-0232
OESA-2022-1633
OPENSUSE-SU-2022:10020-1
OPENSUSE-SU-2022_1376-1
OPENSUSE-SU-2024:12010-1
OPENSUSE-SU-2024:12105-1
RHSA-2022:7640
RHSA-2022_7640
RHSA-2022:8219
RHSA-2022_8219
RLSA-2022:7640
RLSA-2022:8219
SUSE-SU-2022:1376-1
SUSE-SU-2022_1376-1
SUSE-SU-2022:1478-1
SUSE-SU-2022_1478-1
USN-5392-1
USN-7204-1
Found an issue in the description? Have something to add? Feel free to write us 👾