Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2018-14354 →
DEBIAN-CVE-2018-14354
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquot...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with a manual subscription or unsubscription.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
mutt
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-1"}]}]
Debian:13
mutt
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-1"}]}]
Debian:14
mutt
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-1"}]}]
Debian:12
neomutt
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20180716+dfsg.1-1"}]}]
Debian:13
neomutt
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20180716+dfsg.1-1"}]}]
Debian:14
neomutt
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20180716+dfsg.1-1"}]}]
Références
- advisory security-tracker.debian.org