NVD

Id
35895  
Name
CVE-2014-9116  
Description
The write_one_header function in mutt 1.5.23 does not properly handle newline characters at the beginning of a header, which allows remote attackers to cause a denial of service (crash) via a header with an empty body, which triggers a heap-based buffer overflow in the mutt_substrdup function.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2014-12-02  
Modified Date
2016-08-29  
Seq
2014-9116  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
183764 35895 CVE-2014-9116 http://advisories.mageia.org/MGASA-2014-0509.html  View
183765 35895 CVE-2014-9116 http://dev.mutt.org/trac/ticket/3716  View
183766 35895 CVE-2014-9116 SUSE-SU-2015:0012  View
183767 35895 CVE-2014-9116 DSA-3083  View
183768 35895 CVE-2014-9116 MDVSA-2014:245  View
183769 35895 CVE-2014-9116 MDVSA-2015:078  View
183770 35895 CVE-2014-9116 [oss-security] 20141127 CVE request: mutt: heap-based buffer overflow in mutt_substrdup()  View
183771 35895 CVE-2014-9116 [oss-security] 20141126 Re: CVE request: mutt: heap-based buffer overflow in mutt_substrdup()  View
183772 35895 CVE-2014-9116 71334  View
183773 35895 CVE-2014-9116 1031266  View
183774 35895 CVE-2014-9116 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=771125  View
183775 35895 CVE-2014-9116 https://bugzilla.redhat.com/show_bug.cgi?id=1168463  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16870 JVNDB-2014-005745 mutt の write_one_header 関数におけるサービス運用妨害 (DoS) の脆弱性 mutt の write_one_header 関数は、ヘッダの冒頭部分で改行文字を適切に処理しないため、サービス運用妨害 (クラッシュ) 状態にされる脆弱性が存在します。 CVE-2014-9116 76409 CVE-2014-9116 35895 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005745.html 2014-11-26 2015-05-25 View