漏洞信息详情
Mutt 资源管理错误漏洞
漏洞简介
Mutt是Michael Elkins个人开发者的一款用于类Unix系统下且基于文本的邮件客户端。
Mutt through 2.0.4 存在安全漏洞,攻击者可利用该漏洞使用一个小的电子邮件消息导致大量内存消耗,并且受害者可能无法看到来自其他人的电子邮件消息。
漏洞公告
目前厂商已发布升级补丁以修复漏洞,补丁获取链接:
https://lists.debian.org/debian-lts-announce/2021/01/msg00017.html
参考网址
来源:GENTOO
链接:https://security.gentoo.org/glsa/202101-25
来源:MISC
链接:https://gitlab.com/muttmua/mutt/-/commit/939b02b33ae29bc0d642570c1dcfd4b339037d19
来源:MISC
链接:https://gitlab.com/muttmua/mutt/-/commit/4a2becbdb4422aaffe3ce314991b9d670b7adf17
来源:MISC
链接:https://gitlab.com/muttmua/mutt/-/commit/d4305208955c5cdd9fe96dfa61e7c1e14e176a14
来源:MLIST
链接:http://www.openwall.com/lists/oss-security/2021/01/27/3
来源:FEDORA
链接:https://lists.fedoraproject.org/archives/list/[email protected]/message/P2OMLQKAOHPYQA4GI7ZUO6UKCPUHLYO7/
来源:DEBIAN
链接:https://www.debian.org/security/2021/dsa-4838
来源:MLIST
链接:http://www.openwall.com/lists/oss-security/2021/01/19/10
来源:MLIST
链接:https://lists.debian.org/debian-lts-announce/2021/01/msg00017.html
来源:MISC
链接:https://gitlab.com/muttmua/mutt/-/issues/323
来源:FEDORA
链接:https://lists.fedoraproject.org/archives/list/[email protected]/message/DXGWXFO77HBCD3VYEIYHHYU33LYWWWNQ/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2021.0294/
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/161116/Gentoo-Linux-Security-Advisory-202101-25.html
来源:vigilance.fr
链接:https://vigilance.fr/vulnerability/Mutt-denial-of-service-via-Semicolon-Characters-34381
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/164832/Red-Hat-Security-Advisory-2021-4181-03.html
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2021.0288/
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/161104/Ubuntu-Security-Notice-USN-4703-1.html
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2021.0237/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2021.3790
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2021.0280/
受影响实体
暂无
补丁
- Mutt 安全漏洞的修复措施<!--2021-1-19-->
还没有评论,来说两句吧...