CVE-2021-3181

CVE Database · CVE-2021-3181

CVE-2021-3181

· MEDIUMModified

CVSS v3.1

6.5

EPSS

2.81%

Published

Jan 19, 2021

Modified

Nov 21, 2024

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

rfc822.c in Mutt through 2.0.4 allows remote attackers to cause a denial of service (mailbox unavailability) by sending email messages with sequences of semicolon characters in RFC822 address fields (aka terminators of empty groups). A small email message from the attacker can cause large memory consumption, and the victim may then be unable to see email messages from other persons.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weaknesses (CWE)

CWE-401

Affected Products (5)

mutt · muttvulnerable

debian · debian_linuxvulnerable

fedoraproject · fedoravulnerable

References (20)

http://www.openwall.com/lists/oss-security/2021/01/19/10

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2021/01/27/3