https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 03:31:30 +0000 https://vulnerability.circl.lu/vuln/cve-2020-14954 <p>Mutt before 1.14.4 and NeoMutt before 2020-06-19 have a STARTTLS buffering issue that affects IMAP, SMTP, and POP3. When a server sends a &#34;begin TLS&#34; response, the client reads additional data (e.g., from a man-in-the-middle attacker) and evaluates it in a TLS context, aka &#34;response injection.&#34;</p> <p>Mutt before 1.14.4 and NeoMutt before 2020-06-19 have a STARTTLS buffering issue that affects IMAP, SMTP, and POP3. When a server sends a &#34;begin TLS&#34; response, the client reads additional data (e.g., from a man-in-the-middle attacker) and evaluates it in a TLS context, aka &#34;response injection.&#34;</p> https://vulnerability.circl.lu/vuln/cve-2020-14954 https://vulnerability.circl.lu/vuln/usn-4403-1 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: mutt, Ubuntu:18.04:LTS: mutt, Ubuntu:20.04:LTS: mutt</p> <p>It was discovered that Mutt incorrectly handled certain requests. An attacker could possibly use this issue to enable MITM attacks. (CVE-2020-14954)</p> <p>This update also address a regression caused in the last update USN-4401-1. It only affected Ubuntu 12.04 ESM, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 19.10.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: mutt, Ubuntu:18.04:LTS: mutt, Ubuntu:20.04:LTS: mutt</p> <p>It was discovered that Mutt incorrectly handled certain requests. An attacker could possibly use this issue to enable MITM attacks. (CVE-2020-14954)</p> <p>This update also address a regression caused in the last update USN-4401-1. It only affected Ubuntu 12.04 ESM, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 19.10.</p> https://vulnerability.circl.lu/vuln/usn-4403-1