VDB
GHSA-qfrq-pp74-gpff
GHSA-qfrq-pp74-gpff
PUBLISHED
CVSS 5.300000190734863 MEDIUM
Record from GitHub Advisory Database · Published April 15, 2022
Buffer Overflow in uudecoder in Mutt affecting all versions starting from 0.94.13 before 2.2.3 allows read past end of input line
Risk scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Timeline
- Apr 15, 2022 CVE Published
- Apr 29, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-qfrq-pp74-gpff
vulnetix vdb fixes GHSA-qfrq-pp74-gpff
Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-qfrq-pp74-gpff/fixes/registry"
The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1328.json url
- https://gitlab.com/muttmua/mutt/-/commit/e5ed080c00e59701ca62ef9b2a6d2612ebf765a5 url
- https://nvd.nist.gov/vuln/detail/CVE-2022-1328 advisory
- https://gitlab.com/muttmua/mutt/-/issues/404 url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/35CD7NH4NFPF5OEG2PHI3CZ3UOK3ICXR url
- http://www.openwall.com/lists/oss-security/2022/04/14/3 url
- https://lists.debian.org/debian-lts-announce/2022/05/msg00010.html advisory
- http://packetstormsecurity.com/files/167717/Mutt-mutt_decode_uuencoded-Memory-Disclosure.html exploit