gnome

evolution_data_server

2 known vulnerabilities · sorted by CVSS score

CVE-2020-14928

evolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and POP3. When a server sends a "begin TLS" response, eds reads additional data and evaluates it in a TLS context, aka "response injection."

gnome / evolution-data-server+6

Network

Published Jul 17, 2020

CVE-2020-16117

MEDIUM5.9

In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid (e.g., minimal) CAPABILITY line on a connection attempt. This is related to imapx_free_capability and imapx_connect_to_server.

gnome / evolution-data-server+1

Network

Published Jul 29, 2020