CVE-2018-14363 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2018-14363 Interim 1 44 2025-11-05T03:26:57Z current 2021-05-30T14:15:14Z 2025-11-05T03:26:57Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2018-14363 An issue was discovered in NeoMutt before 2018-07-16. newsrc.c does not properly restrict '/' characters that may have unsafe interaction with cache pathnames. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2018-July/004326.html E-Mail link for SUSE-SU-2018:2084-1 https://lists.suse.com/pipermail/sle-security-updates/2018-July/004327.html E-Mail link for SUSE-SU-2018:2085-1 https://lists.suse.com/pipermail/sle-security-updates/2019-May/005432.html E-Mail link for SUSE-SU-2019:1196-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DOKOW6TLEFRIONJPNWZYWW7NMBLV3AWF/#DOKOW6TLEFRIONJPNWZYWW7NMBLV3AWF E-Mail link for openSUSE-SU-2018:2212-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DZCWXEAUIOLHKNGMVSJPJWM4CB2WNKOV/#DZCWXEAUIOLHKNGMVSJPJWM4CB2WNKOV E-Mail link for openSUSE-SU-2019:0052-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings HPE Helion OpenStack 8 Image SLES12-SP4-SAP-Azure Image SLES12-SP4-SAP-Azure-BYOS Image SLES12-SP4-SAP-Azure-LI-BYOS-Production Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production Image SLES12-SP4-SAP-EC2-HVM Image SLES12-SP4-SAP-EC2-HVM-BYOS Image SLES12-SP4-SAP-GCE Image SLES12-SP4-SAP-GCE-BYOS Image SLES12-SP4-SAP-OCI-BYOS Image SLES12-SP5-Azure-SAP-BYOS Image SLES12-SP5-Azure-SAP-On-Demand Image SLES12-SP5-EC2-SAP-BYOS Image SLES12-SP5-EC2-SAP-On-Demand Image SLES12-SP5-GCE-SAP-BYOS Image SLES12-SP5-GCE-SAP-On-Demand Image SLES12-SP5-OCI-BYOS-SAP-BYOS Image SLES12-SP5-SAP-Azure-LI-BYOS-Production Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 openSUSE Leap 15.0 openSUSE Leap 15.2 openSUSE Tumbleweed mutt mutt-1.10.1-3.3.4 mutt-1.10.1-55.6.1 mutt-1.10.1-lp150.2.3.1 mutt-1.10.1-lp152.2.9 mutt-2.0.7-2.2 mutt-2.2.12-150600.1.8 mutt-2.2.13-160000.2.2 mutt-doc mutt-doc-1.10.1-3.3.4 mutt-doc-1.10.1-lp150.2.3.1 mutt-doc-1.10.1-lp152.2.9 mutt-doc-2.0.7-2.2 mutt-doc-2.2.12-150600.1.8 mutt-doc-2.2.13-160000.2.2 mutt-lang mutt-lang-1.10.1-3.3.4 mutt-lang-1.10.1-lp150.2.3.1 mutt-lang-1.10.1-lp152.2.9 mutt-lang-2.0.7-2.2 mutt-lang-2.2.12-150600.1.8 mutt-lang-2.2.13-160000.2.2 neomutt-20210205-3.3 neomutt-doc-20210205-3.3 neomutt-lang-20210205-3.3 mutt-1.10.1-55.6.1 as a component of Image SLES12-SP4-SAP-Azure mutt-1.10.1-55.6.1 as a component of Image SLES12-SP4-SAP-Azure-BYOS mutt-1.10.1-55.6.1 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production mutt-1.10.1-55.6.1 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production mutt-1.10.1-55.6.1 as a component of Image SLES12-SP4-SAP-EC2-HVM mutt-1.10.1-55.6.1 as a component of Image SLES12-SP4-SAP-EC2-HVM-BYOS mutt-1.10.1-55.6.1 as a component of Image SLES12-SP4-SAP-GCE mutt-1.10.1-55.6.1 as a component of Image SLES12-SP4-SAP-GCE-BYOS mutt-1.10.1-55.6.1 as a component of Image SLES12-SP4-SAP-OCI-BYOS mutt-1.10.1-55.6.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS mutt-1.10.1-55.6.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand mutt-1.10.1-55.6.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS mutt-1.10.1-55.6.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand mutt-1.10.1-55.6.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS mutt-1.10.1-55.6.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand mutt-1.10.1-55.6.1 as a component of Image SLES12-SP5-OCI-BYOS-SAP-BYOS mutt-1.10.1-55.6.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production mutt-1.10.1-55.6.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production mutt-1.10.1-55.6.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 mutt-1.10.1-55.6.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 mutt-1.10.1-55.6.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 mutt-1.10.1-3.3.4 as a component of SUSE Linux Enterprise Module for Basesystem 15 mutt-doc-1.10.1-3.3.4 as a component of SUSE Linux Enterprise Module for Basesystem 15 mutt-lang-1.10.1-3.3.4 as a component of SUSE Linux Enterprise Module for Basesystem 15 mutt-1.10.1-3.3.4 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 mutt-doc-1.10.1-3.3.4 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 mutt-lang-1.10.1-3.3.4 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 mutt-1.10.1-3.3.4 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 mutt-doc-1.10.1-3.3.4 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 mutt-lang-1.10.1-3.3.4 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 mutt-1.10.1-3.3.4 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 mutt-doc-1.10.1-3.3.4 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 mutt-lang-1.10.1-3.3.4 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 mutt-1.10.1-3.3.4 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 mutt-doc-1.10.1-3.3.4 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 mutt-lang-1.10.1-3.3.4 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 mutt-1.10.1-3.3.4 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 mutt-doc-1.10.1-3.3.4 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 mutt-lang-1.10.1-3.3.4 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 mutt-2.2.12-150600.1.8 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 mutt-doc-2.2.12-150600.1.8 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 mutt-lang-2.2.12-150600.1.8 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 mutt-2.2.12-150600.1.8 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 mutt-doc-2.2.12-150600.1.8 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 mutt-lang-2.2.12-150600.1.8 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 mutt-1.10.1-55.6.1 as a component of SUSE Linux Enterprise Server 12 SP3 mutt-1.10.1-55.6.1 as a component of SUSE Linux Enterprise Server 12 SP3-TERADATA mutt-1.10.1-55.6.1 as a component of SUSE Linux Enterprise Server 12 SP4 mutt-1.10.1-55.6.1 as a component of SUSE Linux Enterprise Server 12 SP5 mutt-2.2.13-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 mutt-doc-2.2.13-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 mutt-lang-2.2.13-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 mutt-1.10.1-55.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 mutt-1.10.1-55.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 mutt-1.10.1-lp150.2.3.1 as a component of openSUSE Leap 15.0 mutt-doc-1.10.1-lp150.2.3.1 as a component of openSUSE Leap 15.0 mutt-lang-1.10.1-lp150.2.3.1 as a component of openSUSE Leap 15.0 mutt-1.10.1-lp152.2.9 as a component of openSUSE Leap 15.2 mutt-doc-1.10.1-lp152.2.9 as a component of openSUSE Leap 15.2 mutt-lang-1.10.1-lp152.2.9 as a component of openSUSE Leap 15.2 mutt-2.0.7-2.2 as a component of openSUSE Tumbleweed mutt-doc-2.0.7-2.2 as a component of openSUSE Tumbleweed mutt-lang-2.0.7-2.2 as a component of openSUSE Tumbleweed neomutt-20210205-3.3 as a component of openSUSE Tumbleweed neomutt-doc-20210205-3.3 as a component of openSUSE Tumbleweed neomutt-lang-20210205-3.3 as a component of openSUSE Tumbleweed mutt as a component of HPE Helion OpenStack 8 mutt as a component of SUSE CaaS Platform 4.0 mutt-doc as a component of SUSE CaaS Platform 4.0 mutt-lang as a component of SUSE CaaS Platform 4.0 mutt as a component of SUSE Enterprise Storage 6 mutt as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS mutt-doc as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS mutt-lang as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS mutt as a component of SUSE Linux Enterprise Server 12 SP2-BCL mutt as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS mutt as a component of SUSE Linux Enterprise Server 12 SP4-LTSS mutt as a component of SUSE Linux Enterprise Server 15 SP1-LTSS mutt-doc as a component of SUSE Linux Enterprise Server 15 SP1-LTSS mutt-lang as a component of SUSE Linux Enterprise Server 15 SP1-LTSS mutt as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 mutt as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 mutt-doc as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 mutt-lang as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 mutt as a component of SUSE OpenStack Cloud 8 mutt as a component of SUSE OpenStack Cloud 9 mutt as a component of SUSE OpenStack Cloud Crowbar 8 mutt as a component of SUSE OpenStack Cloud Crowbar 9 An issue was discovered in NeoMutt before 2018-07-16. newsrc.c does not properly restrict '/' characters that may have unsafe interaction with cache pathnames. CVE-2018-14363 Image SLES12-SP4-SAP-Azure:mutt-1.10.1-55.6.1 Image SLES12-SP4-SAP-Azure-BYOS:mutt-1.10.1-55.6.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:mutt-1.10.1-55.6.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:mutt-1.10.1-55.6.1 Image SLES12-SP4-SAP-EC2-HVM:mutt-1.10.1-55.6.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:mutt-1.10.1-55.6.1 Image SLES12-SP4-SAP-GCE:mutt-1.10.1-55.6.1 Image SLES12-SP4-SAP-GCE-BYOS:mutt-1.10.1-55.6.1 Image SLES12-SP4-SAP-OCI-BYOS:mutt-1.10.1-55.6.1 Image SLES12-SP5-Azure-SAP-BYOS:mutt-1.10.1-55.6.1 Image SLES12-SP5-Azure-SAP-On-Demand:mutt-1.10.1-55.6.1 Image SLES12-SP5-EC2-SAP-BYOS:mutt-1.10.1-55.6.1 Image SLES12-SP5-EC2-SAP-On-Demand:mutt-1.10.1-55.6.1 Image SLES12-SP5-GCE-SAP-BYOS:mutt-1.10.1-55.6.1 Image SLES12-SP5-GCE-SAP-On-Demand:mutt-1.10.1-55.6.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:mutt-1.10.1-55.6.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:mutt-1.10.1-55.6.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:mutt-1.10.1-55.6.1 SUSE Linux Enterprise Desktop 12 SP3:mutt-1.10.1-55.6.1 SUSE Linux Enterprise Desktop 12 SP4:mutt-1.10.1-55.6.1 SUSE Linux Enterprise High Performance Computing 12 SP5:mutt-1.10.1-55.6.1 SUSE Linux Enterprise Module for Basesystem 15:mutt-1.10.1-3.3.4 SUSE Linux Enterprise Module for Basesystem 15:mutt-doc-1.10.1-3.3.4 SUSE Linux Enterprise Module for Basesystem 15:mutt-lang-1.10.1-3.3.4 SUSE Linux Enterprise Module for Basesystem 15 SP1:mutt-1.10.1-3.3.4 SUSE Linux Enterprise Module for Basesystem 15 SP1:mutt-doc-1.10.1-3.3.4 SUSE Linux Enterprise Module for Basesystem 15 SP1:mutt-lang-1.10.1-3.3.4 SUSE Linux Enterprise Module for Basesystem 15 SP2:mutt-1.10.1-3.3.4 SUSE Linux Enterprise Module for Basesystem 15 SP2:mutt-doc-1.10.1-3.3.4 SUSE Linux Enterprise Module for Basesystem 15 SP2:mutt-lang-1.10.1-3.3.4 SUSE Linux Enterprise Module for Basesystem 15 SP3:mutt-1.10.1-3.3.4 SUSE Linux Enterprise Module for Basesystem 15 SP3:mutt-doc-1.10.1-3.3.4 SUSE Linux Enterprise Module for Basesystem 15 SP3:mutt-lang-1.10.1-3.3.4 SUSE Linux Enterprise Module for Basesystem 15 SP4:mutt-1.10.1-3.3.4 SUSE Linux Enterprise Module for Basesystem 15 SP4:mutt-doc-1.10.1-3.3.4 SUSE Linux Enterprise Module for Basesystem 15 SP4:mutt-lang-1.10.1-3.3.4 SUSE Linux Enterprise Module for Basesystem 15 SP5:mutt-1.10.1-3.3.4 SUSE Linux Enterprise Module for Basesystem 15 SP5:mutt-doc-1.10.1-3.3.4 SUSE Linux Enterprise Module for Basesystem 15 SP5:mutt-lang-1.10.1-3.3.4 SUSE Linux Enterprise Module for Basesystem 15 SP6:mutt-2.2.12-150600.1.8 SUSE Linux Enterprise Module for Basesystem 15 SP6:mutt-doc-2.2.12-150600.1.8 SUSE Linux Enterprise Module for Basesystem 15 SP6:mutt-lang-2.2.12-150600.1.8 SUSE Linux Enterprise Module for Basesystem 15 SP7:mutt-2.2.12-150600.1.8 SUSE Linux Enterprise Module for Basesystem 15 SP7:mutt-doc-2.2.12-150600.1.8 SUSE Linux Enterprise Module for Basesystem 15 SP7:mutt-lang-2.2.12-150600.1.8 SUSE Linux Enterprise Server 12 SP3:mutt-1.10.1-55.6.1 SUSE Linux Enterprise Server 12 SP3-TERADATA:mutt-1.10.1-55.6.1 SUSE Linux Enterprise Server 12 SP4:mutt-1.10.1-55.6.1 SUSE Linux Enterprise Server 12 SP5:mutt-1.10.1-55.6.1 SUSE Linux Enterprise Server 16.0:mutt-2.2.13-160000.2.2 SUSE Linux Enterprise Server 16.0:mutt-doc-2.2.13-160000.2.2 SUSE Linux Enterprise Server 16.0:mutt-lang-2.2.13-160000.2.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:mutt-1.10.1-55.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mutt-1.10.1-55.6.1 openSUSE Leap 15.0:mutt-1.10.1-lp150.2.3.1 openSUSE Leap 15.0:mutt-doc-1.10.1-lp150.2.3.1 openSUSE Leap 15.0:mutt-lang-1.10.1-lp150.2.3.1 openSUSE Leap 15.2:mutt-1.10.1-lp152.2.9 openSUSE Leap 15.2:mutt-doc-1.10.1-lp152.2.9 openSUSE Leap 15.2:mutt-lang-1.10.1-lp152.2.9 openSUSE Tumbleweed:mutt-2.0.7-2.2 openSUSE Tumbleweed:mutt-doc-2.0.7-2.2 openSUSE Tumbleweed:mutt-lang-2.0.7-2.2 openSUSE Tumbleweed:neomutt-20210205-3.3 openSUSE Tumbleweed:neomutt-doc-20210205-3.3 openSUSE Tumbleweed:neomutt-lang-20210205-3.3 important 5 AV:N/AC:L/Au:N/C:N/I:P/A:N 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N