{ "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2021-3181", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "rfc822.c in Mutt through 2.0.4 allows remote attackers to cause a denial of service (mailbox unavailability) by sending email messages with sequences of semicolon characters in RFC822 address fields (aka terminators of empty groups). A small email message from the attacker can cause large memory consumption, and the victim may then be unable to see email messages from other persons." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "url": "https://gitlab.com/muttmua/mutt/-/issues/323", "refsource": "MISC", "name": "https://gitlab.com/muttmua/mutt/-/issues/323" }, { "url": "https://gitlab.com/muttmua/mutt/-/commit/4a2becbdb4422aaffe3ce314991b9d670b7adf17", "refsource": "MISC", "name": "https://gitlab.com/muttmua/mutt/-/commit/4a2becbdb4422aaffe3ce314991b9d670b7adf17" }, { "url": "https://gitlab.com/muttmua/mutt/-/commit/939b02b33ae29bc0d642570c1dcfd4b339037d19", "refsource": "MISC", "name": "https://gitlab.com/muttmua/mutt/-/commit/939b02b33ae29bc0d642570c1dcfd4b339037d19" }, { "url": "https://gitlab.com/muttmua/mutt/-/commit/d4305208955c5cdd9fe96dfa61e7c1e14e176a14", "refsource": "MISC", "name": "https://gitlab.com/muttmua/mutt/-/commit/d4305208955c5cdd9fe96dfa61e7c1e14e176a14" }, { "refsource": "MLIST", "name": "[oss-security] 20210119 Re: mutt recipient parsing memory leak", "url": "http://www.openwall.com/lists/oss-security/2021/01/19/10" }, { "refsource": "MLIST", "name": "[debian-lts-announce] 20210120 [SECURITY] [DLA 2529-1] mutt security update", "url": "https://lists.debian.org/debian-lts-announce/2021/01/msg00017.html" }, { "refsource": "GENTOO", "name": "GLSA-202101-25", "url": "https://security.gentoo.org/glsa/202101-25" }, { "refsource": "DEBIAN", "name": "DSA-4838", "url": "https://www.debian.org/security/2021/dsa-4838" }, { "refsource": "MLIST", "name": "[oss-security] 20210127 glibc iconv crash with ISO-2022-JP-3", "url": "http://www.openwall.com/lists/oss-security/2021/01/27/3" }, { "refsource": "FEDORA", "name": "FEDORA-2021-a4f016c6c8", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P2OMLQKAOHPYQA4GI7ZUO6UKCPUHLYO7/" }, { "refsource": "FEDORA", "name": "FEDORA-2021-4205e1fc23", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DXGWXFO77HBCD3VYEIYHHYU33LYWWWNQ/" } ] } }