Bug 2325330 (CVE-2024-49394) - CVE-2024-49394 mutt: neomutt: In-Reply-To email header field it not protected by cryptograpic signing
Summary: CVE-2024-49394 mutt: neomutt: In-Reply-To email header field it not protected...
Keywords:
Status: NEW
Alias: CVE-2024-49394
Product: Security Response
Classification: Other
Component: vulnerability-draft
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2024-11-11 21:15 UTC by OSIDB Bzimport
Modified: 2024-11-11 21:44 UTC (History)
0 users

Fixed In Version:
Doc Type: ---
Doc Text:
In mutt and neomutt the In-Reply-To email header field is not protected by cryptographic signing which allows an attacker to reuse an unencrypted but signed email message to impersonate the original sender.
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2024-11-11 21:15:44 UTC 
In mutt and neomutt the In-Reply-To email header field is not protected by cryptographic signing which allows an attacker to reuse an unencrypted but signed email message to impersonate the original sender.
Note You need to log in before you can comment on or make changes to this bug.