Vulnerabilities > CVE-2021-3181 - Memory Leak vulnerability in multiple products

CVSS 6.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

NVD

Published: 2021-01-19

Updated: 2024-11-21

Summary

rfc822.c in Mutt through 2.0.4 allows remote attackers to cause a denial of service (mailbox unavailability) by sending email messages with sequences of semicolon characters in RFC822 address fields (aka terminators of empty groups). A small email message from the attacker can cause large memory consumption, and the victim may then be unable to see email messages from other persons.

Vulnerable Configurations

Part	Description	Count
Application	Mutt Mutt Mutt 1.5 Mutt Mutt 1.5.1 Mutt Mutt 1.5.2 Mutt Mutt 1.5.3 Mutt Mutt 1.5.4 Mutt Mutt 1.5.5 Mutt Mutt 1.5.6 Mutt Mutt 1.5.7 Mutt Mutt 1.5.8 Mutt Mutt 1.5.9 Mutt Mutt 1.5.10 Mutt Mutt 1.5.11 Mutt Mutt 1.5.12 Mutt Mutt 1.5.13 Mutt Mutt 1.5.14 Mutt Mutt 1.5.15 Mutt Mutt 1.5.16 Mutt Mutt 1.5.17 Mutt Mutt 1.5.18 Mutt Mutt 1.5.19 Mutt Mutt 1.5.20 Mutt Mutt 1.5.20-7 Mutt Mutt 1.5.21 Mutt Mutt 1.5.22 Mutt Mutt 1.10.1 Mutt Mutt 1.11.0 Mutt Mutt 1.11.1 Mutt Mutt 1.11.2 Mutt Mutt 1.11.3 Mutt Mutt 1.11.4 Mutt Mutt 1.12.0 Mutt Mutt 1.12.1 Mutt Mutt 1.12.2 Mutt Mutt 1.13.0 Mutt Mutt 1.13.1 Mutt Mutt 1.13.2 Mutt Mutt 1.13.3 Mutt Mutt 1.13.4 Mutt Mutt 1.13.5 Mutt Mutt 1.14.0 Mutt Mutt 1.14.1 Mutt Mutt 1.14.2 Mutt Mutt 1.14.3 Mutt Mutt 1.14.4 Mutt Mutt 1.14.5 Mutt Mutt 1.14.6 Mutt Mutt 1.14.7 Mutt Mutt 2.0.0 Mutt Mutt 2.0.1 Mutt Mutt 2.0.2 Mutt Mutt 2.0.3 Mutt Mutt 2.0.4	52
OS	Debian Debian Debian Linux 9.0 Debian Debian Linux 10.0	2
OS	Fedoraproject Fedoraproject Fedora 32 Fedoraproject Fedora 33	2

Common Weakness Enumeration (CWE)

CWE-401 - Improper Release of Memory Before Removing Last Reference ('Memory Leak')

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References