[ GLSA 202105-05 ] Mutt, NeoMutt

[GLSA]

Gentoo Linux Security Advisory

Title: Mutt, NeoMutt: Denial of service (GLSA 202105-05)
Severity: low
Exploitable: remote
Date: 2021-05-26
Bug(s): #788388, #788391
ID: 202105-05

Synopsis

A vulnerability in Mutt and NeoMutt could lead to a Denial of
Service condition.


Background

Mutt is a small but very powerful text-based mail client.NeoMutt is a command line mail reader (or MUA). It’s a fork of Mutt
with added features.


Affected Packages

Package: mail-client/mutt
Vulnerable: < 2.0.7
Unaffected: >= 2.0.7
Architectures: All supported architectures

Package: mail-client/neomutt
Vulnerable: < 20210205-r1
Unaffected: >= 20210205-r1
Architectures: All supported architectures


Description

It was discovered that Mutt, and NeoMutt did not properly handle certain
situations where an IMAP sequence set ends with a comma.


Impact

A remote attacker could entice a user to connect to a malicious IMAP
server to cause a Denial of Service condition, or other unspecified
impacts.


Workaround

There is no known workaround at this time.

Resolution

All Mutt users should upgrade to the latest version: