https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-06T03:31:28.893513+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2020-14954 CVE-2020-14954 2026-10-06T03:31:28.927969+00:00

Mutt before 1.14.4 and NeoMutt before 2020-06-19 have a STARTTLS buffering issue that affects IMAP, SMTP, and POP3. When a server sends a "begin TLS" response, the client reads additional data (e.g., from a man-in-the-middle attacker) and evaluates it in a TLS context, aka "response injection."

 https://vulnerability.circl.lu/vuln/usn-4403-1 USN-4403-1 — mutt vulnerability and regression 2026-10-06T03:31:28.928163+00:00

Affected: Ubuntu:16.04:LTS: mutt, Ubuntu:18.04:LTS: mutt, Ubuntu:20.04:LTS: mutt

It was discovered that Mutt incorrectly handled certain requests. An attacker could possibly use this issue to enable MITM attacks. (CVE-2020-14954)

This update also address a regression caused in the last update USN-4401-1. It only affected Ubuntu 12.04 ESM, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 19.10.