CVE-2005-2351 Denial of service in mutt

Medium 5.5 Published 1 Nov 2019 Updated 7 Aug 2024

An attacker can cause a denial of service in the Mutt email client by exploiting a vulnerability in its handling of temporary files.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: Available

What is CVE-2005-2351?

CVE-2005-2351 is a medium-severity denial of service vulnerability in Debian Debian Linux, published on 1 Nov 2019. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Mutt before 1.5.20 patch 7 allows an attacker to cause a denial of service via a series of requests to mutt temporary files.

Weakness: CWE-668

Which versions are affected by CVE-2005-2351?

It affects 2 products.

Products include Debian Debian Linux, Mutt Mutt.

How do I fix CVE-2005-2351?

Upgrade to a fixed version.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2005-2351 being exploited?

There is no known exploitation of CVE-2005-2351 in the wild and no public exploit code.

All Debian Debian Linux vulnerabilities

Sources

Also known as DEBIAN-CVE-2005-2351, GHSA-f7xm-4pw3-gmvw.