CVE-2024-49394 — Improper Verification of Cryptographic Signature in Redhat Enterprise Linux
Severity
5.3MEDIUMNVD
EPSS
0.1%
top 75.93%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedNov 12
Latest updateJan 15
Description
In mutt and neomutt the In-Reply-To email header field is not protected by cryptographic signing which allows an attacker to reuse an unencrypted but signed email message to impersonate the original sender.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:NExploitability: 3.9 | Impact: 1.4
Affected Packages1 packages
Also affects: Enterprise Linux 8.0, 9.0
🔴Vulnerability Details
3CVEList
▶
GHSA▶
GHSA-q998-8jff-x3rg: In mutt and neomutt the In-Reply-To email header field is not protected by cryptographic signing which allows an attacker to reuse an unencrypted but↗2024-11-12
OSV▶
CVE-2024-49394: In mutt and neomutt the In-Reply-To email header field is not protected by cryptographic signing which allows an attacker to reuse an unencrypted but↗2024-11-12