CVE-2018-14350

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer overflow for a FETCH response with a long INTERNALDATE field.

• CWE-787

• http://www.mutt.org/news.htmlRelease Notes, Vendor Advisory
• http://www.securityfocus.com/bid/104931Third Party Advisory, VDB Entry
• https://github.com/neomutt/neomutt/commit/1b0f0d0988e6df4e32e9f4bf8780846ea95d4485Patch, Third Party Advisory
• https://gitlab.com/muttmua/mutt/commit/3287534daa3beac68e2e83ca4b4fe8a3148ff870Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2018/08/msg00001.htmlMailing List, Third Party Advisory
• https://neomutt.org/2018/07/16/releaseRelease Notes, Vendor Advisory
• https://security.gentoo.org/glsa/201810-07Third Party Advisory
• https://usn.ubuntu.com/3719-1/Third Party Advisory
• https://usn.ubuntu.com/3719-2/Third Party Advisory
• https://usn.ubuntu.com/3719-3/Third Party Advisory
• https://www.debian.org/security/2018/dsa-4277Third Party Advisory
• http://www.mutt.org/news.htmlRelease Notes, Vendor Advisory
• http://www.securityfocus.com/bid/104931Third Party Advisory, VDB Entry
• https://github.com/neomutt/neomutt/commit/1b0f0d0988e6df4e32e9f4bf8780846ea95d4485Patch, Third Party Advisory
• https://gitlab.com/muttmua/mutt/commit/3287534daa3beac68e2e83ca4b4fe8a3148ff870Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2018/08/msg00001.htmlMailing List, Third Party Advisory
• https://neomutt.org/2018/07/16/releaseRelease Notes, Vendor Advisory
• https://security.gentoo.org/glsa/201810-07Third Party Advisory
• https://usn.ubuntu.com/3719-1/Third Party Advisory
• https://usn.ubuntu.com/3719-2/Third Party Advisory
• https://usn.ubuntu.com/3719-3/Third Party Advisory
• https://www.debian.org/security/2018/dsa-4277Third Party Advisory

Published

Jul 17, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-14345An issue was discovered in SDDM through 0.17.0. If configure…
• CVE-2018-14346GNU Libextractor before 1.7 has a stack-based buffer overflo…
• CVE-2018-14347GNU Libextractor before 1.7 contains an infinite loop vulner…
• CVE-2018-14348libcgroup up to and including 0.41 creates /var/log/cgred wi…
• CVE-2018-14349An issue was discovered in Mutt before 1.10.1 and NeoMutt be…9.8
• CVE-2018-1435IBM Notes 8.5 and 9.0 is vulnerable to a DLL hijacking attac…7.8
• CVE-2018-14351An issue was discovered in Mutt before 1.10.1 and NeoMutt be…9.8
• CVE-2018-14352An issue was discovered in Mutt before 1.10.1 and NeoMutt be…9.8
• CVE-2018-14353An issue was discovered in Mutt before 1.10.1 and NeoMutt be…9.8
• CVE-2018-14354An issue was discovered in Mutt before 1.10.1 and NeoMutt be…9.8
• CVE-2018-14355An issue was discovered in Mutt before 1.10.1 and NeoMutt be…5.3
• CVE-2018-14356An issue was discovered in Mutt before 1.10.1 and NeoMutt be…9.8