遠端 CentOS Linux 8 主機上安裝的套件受到 CESA-2024:3058 公告中提及的多個弱點影響。

  - 在 Mutt >1.5.2 <2.2.12 中檢視特製電子郵件時發生 Null 指標解除參照 (CVE-2023-4874)

  - 在 Mutt >1.5.2 <2.2.12 中使用特製的草稿訊息進行撰寫時發生 Null 指標解除參照 (CVE-2023-4875)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

The remote Ubuntu 23.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6374-2 advisory.

    USN-6374-1 fixed vulnerabilities in Mutt. This update provides the corresponding updates for Ubuntu 23.10.



Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the mutt package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Null pointer dereference when viewing a specially crafted email in Mutt >1.5.2 <2.2.12 (CVE-2023-4874)

  - Null pointer dereference when composing from a specially crafted draft message in Mutt >1.5.2 <2.2.12     (CVE-2023-4875)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-357 advisory.

    Null pointer dereference when viewing a specially crafted email in Mutt >1.5.2 <2.2.12 (CVE-2023-4874)

    Null pointer dereference when composing from a specially crafted draft message in Mutt >1.5.2 <2.2.12     (CVE-2023-4875)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3702-1 advisory.

  - Null pointer dereference when viewing a specially crafted email in Mutt >1.5.2 <2.2.12 (CVE-2023-4874)

  - Null pointer dereference when composing from a specially crafted draft message in Mutt >1.5.2 <2.2.12     (CVE-2023-4875)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2024-3058 advisory.

    - Fix for: CVE-2023-4874 CVE-2023-4875

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2024:3058 advisory.

  - Null pointer dereference when viewing a specially crafted email in Mutt >1.5.2 <2.2.12 (CVE-2023-4874)

  - Null pointer dereference when composing from a specially crafted draft message in Mutt >1.5.2 <2.2.12     (CVE-2023-4875)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

远程 Debian 11/12 主机上安装的一个程序包受到 dsa-5494 公告中提及的多个漏洞影响。

  - 在 Mutt >1.5.2 <2.2.12 中查看特别构建的电子邮件时发生空指针取消引用 (CVE-2023-4874)

  - 在 Mutt >1.5.2 <2.2.12 中根据特别构建的电子邮件撰写内容时发生空指针取消引用 (CVE-2023-4875)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

远程 Debian 10 主机上安装的一个程序包受到 dla-3574 公告中提及的多个漏洞影响。

  - 在 Mutt >1.5.2 <2.2.12 中查看特别构建的电子邮件时发生空指针取消引用 (CVE-2023-4874)

  - 在 Mutt >1.5.2 <2.2.12 中根据特别构建的电子邮件撰写内容时发生空指针取消引用 (CVE-2023-4875)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

远程主机上安装的 mutt 版本低于 1.5.21-29。因此，它受到公告 ALAS2-2023-2265 中提及的多个漏洞影响。

  - 在 Mutt >1.5.2 <2.2.12 中查看特别构建的电子邮件时发生空指针取消引用 (CVE-2023-4874)

  - 在 Mutt >1.5.2 <2.2.12 中根据特别构建的电子邮件撰写内容时发生空指针取消引用 (CVE-2023-4875)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

远程主机上安装的 mutt 版本低于 1.5.20-7.20091214hg736b6a.10。因此，它受到 ALAS-2023-1836 公告中提及的多个漏洞影响。

  - 在 Mutt >1.5.2 <2.2.12 中查看特别构建的电子邮件时发生空指针取消引用 (CVE-2023-4874)

  - 在 Mutt >1.5.2 <2.2.12 中根据特别构建的电子邮件撰写内容时发生空指针取消引用 (CVE-2023-4875)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

ID	名前	製品	ファミリー	公開日	更新日	深刻度
197684	CentOS 8 : mutt (CESA-2024:3058)	Nessus	CentOS Local Security Checks	2024/5/22	2024/5/22	medium
183427	Ubuntu 23.10 : Mutt vulnerabilities (USN-6374-2)	Nessus	Ubuntu Local Security Checks	2023/10/19	2024/10/29	medium
190315	EulerOS 2.0 SP5 : mutt (EulerOS-SA-2024-1153)	Nessus	Huawei Local Security Checks	2024/2/8	2024/2/8	medium
189064	EulerOS 2.0 SP10 : mutt (EulerOS-SA-2023-3187)	Nessus	Huawei Local Security Checks	2024/1/16	2024/1/16	medium
188767	EulerOS 2.0 SP11 : mutt (EulerOS-SA-2023-3280)	Nessus	Huawei Local Security Checks	2024/1/16	2024/1/16	medium
182445	Amazon Linux 2023 : mutt (ALAS2023-2023-357)	Nessus	Amazon Linux Local Security Checks	2023/10/3	2024/12/11	medium
181750	SUSE SLES12 Security Update : mutt (SUSE-SU-2023:3702-1)	Nessus	SuSE Local Security Checks	2023/9/21	2023/9/21	medium
198017	Oracle Linux 8 : mutt (ELSA-2024-3058)	Nessus	Oracle Linux Local Security Checks	2024/5/28	2024/9/21	medium
197684	CentOS 8 : mutt (CESA-2024:3058)	Nessus	CentOS Local Security Checks	2024/5/22	2024/5/22	medium
181212	Debian DSA-5494-1：mutt - 安全更新	Nessus	Debian Local Security Checks	2023/9/11	2025/1/24	medium
181696	Debian DLA-3574-1：mutt - LTS 安全更新	Nessus	Debian Local Security Checks	2023/9/20	2025/1/22	medium
182643	Amazon Linux 2：mutt (ALAS-2023-2265)	Nessus	Amazon Linux Local Security Checks	2023/10/5	2024/12/11	medium
182704	Amazon Linux AMI：mutt (ALAS-2023-1836)	Nessus	Amazon Linux Local Security Checks	2023/10/6	2024/12/11	medium

検出

プラグインの検索

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium