CVE-2018-14354 - CVE House
Back to Database
Status published Critical CVE-2018-14354

An issue was discovered in Mutt before 1.10.1 and NeoMutt...

Vulnerability Description

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with a manual subscription or unsubscription.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-14354

Credits & Attribution

No credits recorded in the NVD database.

References

More from mutt

View All →
CVE-2021-3181
rfc822.c in Mutt through 2.0.4 allows remote attackers to cause...
Medium 6.5
CVE-2021-32055
Mutt 1.11.0 through 2.0.x before 2.0.7 (and NeoMutt 2019-10-25 through...
Critical 9.1
CVE-2020-28896
Mutt before 2.0.2 and NeoMutt before 2020-11-20 did not ensure...
Medium 5.3
CVE-2020-14954
Mutt before 1.14.4 and NeoMutt before 2020-06-19 have a STARTTLS...
Medium 5.9
CVE-2020-14154
Mutt before 1.14.3 proceeds with a connection even if, in...
Medium 4.8

Affected Vendor

Affected Software

mutt, neomutt, ubuntu linux, debian linux, enterprise linux desktop, enterprise linux server, enterprise linux server aus, enterprise linux server eus, enterprise linux server tus, enterprise linux workstation
Vulnerable Versions:
0, 12.04, 14.04, 16.04, 18.04, 8.0, 9.0, 6.0, 7.0, 7.6, 7.7, 7.5

Timeline

Official Publish: July 17th, 2018
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.