Gnome

Evolution-data-server

3 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.9

CVE-2020-16117

Exploit
  • EPSS 0.38%
  • Published 29.07.2020 18:15:14
  • Last modified 21.11.2024 05:06:47

In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid (e.g., minimal) CAPABILITY line on a connection attempt. This is related to imapx_free_capability and im...

5.9

CVE-2020-14928

Exploit
  • EPSS 6.35%
  • Published 17.07.2020 16:15:11
  • Last modified 21.11.2024 05:04:27

evolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and POP3. When a server sends a "begin TLS" response, eds reads additional data and evaluates it in a TLS context, aka "response injection."

5.8

CVE-2009-0582

  • EPSS 3.48%
  • Published 14.03.2009 18:30:00
  • Last modified 09.04.2025 00:30:58

The ntlm_challenge function in the NTLM SASL authentication mechanism in camel/camel-sasl-ntlm.c in Camel in Evolution Data Server (aka evolution-data-server) 2.24.5 and earlier, and 2.25.92 and earlier 2.25.x versions, does not validate whether a ce...