FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-04-18 11:12:36 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML ID	Description
6eb9cf14-bab0-11ec-8f59-4437e6ad11c4	mutt -- mutt_decode_uuencoded() can read past the of the input line Tavis Ormandy reports: mutt_decode_uuencoded(), the line length is read from the untrusted uuencoded part without validation. This could result in including private memory in message parts, for example fragments of other messages, passphrases or keys in replys Discovery 2022-04-04 Entry 2022-04-12 mutt < 2.2.3 CVE-2022-1328 https://gitlab.com/muttmua/mutt/-/issues/404

VuXML ID

Description

6eb9cf14-bab0-11ec-8f59-4437e6ad11c4

mutt -- mutt_decode_uuencoded() can read past the of the input line

Tavis Ormandy reports:

mutt_decode_uuencoded(), the line length is read from the untrusted uuencoded part without validation. This could result in including private memory in message parts, for example fragments of other messages, passphrases or keys in replys

Discovery 2022-04-04
Entry 2022-04-12
mutt

< 2.2.3

CVE-2022-1328
https://gitlab.com/muttmua/mutt/-/issues/404