CVE-2018-14352

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in imap/util.c does not leave room for quote characters, leading to a stack-based buffer overflow.

• CWE-787

• http://www.mutt.org/news.htmlRelease Notes, Vendor Advisory
• https://github.com/neomutt/neomutt/commit/e27b65b3bf8defa34db58919496056caf3850cd4Patch, Third Party Advisory
• https://gitlab.com/muttmua/mutt/commit/e0131852c6059107939893016c8ff56b6e42865dPatch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2018/08/msg00001.htmlMailing List, Third Party Advisory
• https://neomutt.org/2018/07/16/releaseRelease Notes, Vendor Advisory
• https://security.gentoo.org/glsa/201810-07Third Party Advisory
• https://usn.ubuntu.com/3719-1/Third Party Advisory
• https://usn.ubuntu.com/3719-2/Third Party Advisory
• https://usn.ubuntu.com/3719-3/Third Party Advisory
• https://www.debian.org/security/2018/dsa-4277Third Party Advisory
• http://www.mutt.org/news.htmlRelease Notes, Vendor Advisory
• https://github.com/neomutt/neomutt/commit/e27b65b3bf8defa34db58919496056caf3850cd4Patch, Third Party Advisory
• https://gitlab.com/muttmua/mutt/commit/e0131852c6059107939893016c8ff56b6e42865dPatch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2018/08/msg00001.htmlMailing List, Third Party Advisory
• https://neomutt.org/2018/07/16/releaseRelease Notes, Vendor Advisory
• https://security.gentoo.org/glsa/201810-07Third Party Advisory
• https://usn.ubuntu.com/3719-1/Third Party Advisory
• https://usn.ubuntu.com/3719-2/Third Party Advisory
• https://usn.ubuntu.com/3719-3/Third Party Advisory
• https://www.debian.org/security/2018/dsa-4277Third Party Advisory

Published

Jul 17, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-14347GNU Libextractor before 1.7 contains an infinite loop vulner…
• CVE-2018-14348libcgroup up to and including 0.41 creates /var/log/cgred wi…
• CVE-2018-14349An issue was discovered in Mutt before 1.10.1 and NeoMutt be…9.8
• CVE-2018-1435IBM Notes 8.5 and 9.0 is vulnerable to a DLL hijacking attac…7.8
• CVE-2018-14350An issue was discovered in Mutt before 1.10.1 and NeoMutt be…9.8
• CVE-2018-14351An issue was discovered in Mutt before 1.10.1 and NeoMutt be…9.8
• CVE-2018-14353An issue was discovered in Mutt before 1.10.1 and NeoMutt be…9.8
• CVE-2018-14354An issue was discovered in Mutt before 1.10.1 and NeoMutt be…9.8
• CVE-2018-14355An issue was discovered in Mutt before 1.10.1 and NeoMutt be…5.3
• CVE-2018-14356An issue was discovered in Mutt before 1.10.1 and NeoMutt be…9.8
• CVE-2018-14357An issue was discovered in Mutt before 1.10.1 and NeoMutt be…9.8
• CVE-2018-14358An issue was discovered in Mutt before 1.10.1 and NeoMutt be…9.8