CVE-2014-9116

Currently unrated

Key Information:

Vendor
Suse
Status
Linux Enterprise Desktop
Suse Linux Enterprise Server
Vendor
CVE Published:
2 December 2014

Summary

The write_one_header function in mutt 1.5.23 does not properly handle newline characters at the beginning of a header, which allows remote attackers to cause a denial of service (crash) via a header with an empty body, which triggers a heap-based buffer overflow in the mutt_substrdup function.

References

https://bugzilla.redhat.com/show_bug.cgi?id=1168463
x_refsource_CONFIRM
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=771125
x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-announce/2015...
vendor-advisoryx_refsource_SUSE

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.