CVE-2020-14954

Mutt before 1.14.4 and NeoMutt before 2020-06-19 have a STARTTLS buffering issue that affects IMAP, SMTP, and POP3. When a server sends a "begin TLS" response, the client reads additional data (e.g., from a man-in-the-middle attacker) and evaluates it in a TLS context, aka "response injection."

References

Affected packages

Git / github.com/muttmua/mutt

Affected ranges

Type

GIT

Repo

https://github.com/muttmua/mutt

Events

Introduced

Fixed

c94d2b00f41cc7eb2504efc0aeb12646aefb2837

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.14.4"
        }
    ]
}

Type

GIT

Repo

https://github.com/neomutt/neomutt

Events

Introduced

Fixed

9014e6d34e0f77cf1ced7531ef82a8e7c25817b4

Fixed

fb013ec666759cb8a9e294347c7b4c1f597639cc

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "20200619"
        }
    ]
}

Type: GIT
Repo: https://gitlab.com/muttmua/mutt
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

c547433cdf2e79191b15c6932c57f1472bfb5ff4

Affected versions

Other

2019-10-25

20191102

20191111

20191129

20191207

20200313

20200320

20200417

20200424

20200501

mutt-0-92-10i

mutt-0-92-11i

mutt-0-92-9i

mutt-0-93-unstable

mutt-0-94-10i-rel

mutt-0-94-13-rel

mutt-0-94-14-rel

mutt-0-94-15-rel

mutt-0-94-16i-rel

mutt-0-94-17i-rel

mutt-0-94-18-rel

mutt-0-94-5i-rel

mutt-0-94-6i-rel

mutt-0-94-7i-rel

mutt-0-94-8i-rel

mutt-0-94-9i-p1

mutt-0-94-9i-rel

mutt-0-95-rel

mutt-0-96-1-rel

mutt-0-96-2-slightly-post-release

mutt-0-96-3-rel

mutt-0-96-4-rel

mutt-0-96-5-rel

mutt-0-96-6-rel

mutt-0-96-7-rel

mutt-0-96-8-rel

mutt-0-96-rel

mutt-1-1-1-1-rel

mutt-1-1-1-2-rel

mutt-1-1-1-rel

mutt-1-1-10-rel

mutt-1-1-11-rel

mutt-1-1-12-rel

mutt-1-1-13-rel

mutt-1-1-14-rel

mutt-1-1-2-rel

mutt-1-1-3-rel

mutt-1-1-4-rel

mutt-1-1-5-rel

mutt-1-1-6-rel

mutt-1-1-7-rel

mutt-1-1-8-rel

mutt-1-1-9-rel

mutt-1-1-rel

mutt-1-10-rel

mutt-1-11-rel

mutt-1-12-rel

mutt-1-13-rel

mutt-1-14-1-rel

mutt-1-14-2-rel

mutt-1-14-3-rel

mutt-1-14-rel

mutt-1-3-1-rel

mutt-1-3-10-rel

mutt-1-3-11-rel

mutt-1-3-12-rel

mutt-1-3-13-rel

mutt-1-3-14-rel

mutt-1-3-15-rel

mutt-1-3-16-rel

mutt-1-3-17-rel

mutt-1-3-18-rel

mutt-1-3-19-rel

mutt-1-3-2-rel

mutt-1-3-20-rel

mutt-1-3-21-rel

mutt-1-3-22-1-rel

mutt-1-3-22-rel

mutt-1-3-23-1-rel

mutt-1-3-23-2-rel

mutt-1-3-23-rel

mutt-1-3-24-rel

mutt-1-3-25-rel

mutt-1-3-26-rel

mutt-1-3-27-rel

mutt-1-3-3-rel

mutt-1-3-4-rel

mutt-1-3-5-rel

mutt-1-3-6-rel

mutt-1-3-7-rel

mutt-1-3-8-rel

mutt-1-3-9-rel

mutt-1-3-rel

mutt-1-5-1-rel

mutt-1-5-15-rel

mutt-1-5-16-rel

mutt-1-5-17-rel

mutt-1-5-18-rel

mutt-1-5-19-rel

mutt-1-5-2-rel

mutt-1-5-20-rel

mutt-1-5-21-rel

mutt-1-5-22-rel

mutt-1-5-24-rel

mutt-1-5-3-rel

mutt-1-5-4-rel

mutt-1-5-5-1-rel

mutt-1-5-5-rel

mutt-1-5-6-rel

mutt-1-6-rel

mutt-1-7-rel

mutt-1-8-rel

mutt-1-9-rel

neomutt-20160822

neomutt-20160827

neomutt-20160910

neomutt-20160916

neomutt-20161002

neomutt-20161003

neomutt-20161014

neomutt-20161028

neomutt-20161104

neomutt-20161126

neomutt-20170113

neomutt-20170128

neomutt-20170206

neomutt-20170225

neomutt-20170306

neomutt-20170414

neomutt-20170421

neomutt-20170428

neomutt-20170526

neomutt-20170602

neomutt-20170609

neomutt-20170707

neomutt-20170714

neomutt-20170907

neomutt-20170912

neomutt-20171006

neomutt-20171013

neomutt-20171027

neomutt-20171208

neomutt-20171215

neomutt-20180223

neomutt-20180323

neomutt-20180512

neomutt-20180622

neomutt-20180716

post-type-punning-patch

pre-type-punning-patch

Database specific

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "9.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "10.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "31"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "32"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "12.04"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "16.04"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "18.04"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "19.10"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "20.04"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "15.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "15.2"
            }
        ]
    }
]

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-14954.json"