Lucene search
GoogleOSV:CVE-2020-16117HistoryJul 29, 2020 - 6:15 p.m.
CVE-2020-16117
2020-07-2918:15:14
Google
osv.dev
5
In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid (e.g., minimal) CAPABILITY line on a connection attempt. This is related to imapx_free_capability and imapx_connect_to_server.
References
gitlab.gnome.org/GNOME/evolution-data-server/-/commit/2cc39592b532cf0dc994fd3694b8e6bf924c9ab5
gitlab.gnome.org/GNOME/evolution-data-server/-/commit/627c3cdbfd077e59aa288c85ff8272950577f1d7
gitlab.gnome.org/GNOME/evolution-data-server/-/issues/189
lists.debian.org/debian-lts-announce/2020/08/msg00005.html
Related
nessus
nessus
Rocky Linux 8 : evolution (RLSA-2021:1752)
2023-11-06 00:00:00
EulerOS 2.0 SP8 : evolution-data-server (EulerOS-SA-2020-1890)
2020-08-28 00:00:00
CentOS 8 : evolution (CESA-2021:1752)
2021-05-19 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for evolution-data-server (EulerOS-SA-2020-1890)
2020-08-31 00:00:00
Debian: Security Advisory (DLA-2309-1)
2020-08-03 00:00:00
cvelist
cvelist
CVE-2020-16117
2020-07-29 17:59:10
debian
debian
[SECURITY] [DLA 2309-1] evolution-data-server security update
2020-08-02 21:17:31
cve
cve
CVE-2020-16117
2020-07-29 18:15:14
redhatcve
redhatcve
CVE-2020-16117
2020-07-30 14:13:39
osv
osv
Low: evolution security, bug fix, and enhancement update
2021-05-18 06:00:34
evolution-data-server - security update
2020-08-02 00:00:00
Low: evolution security, bug fix, and enhancement update
2021-05-18 06:00:34
nvd
nvd
CVE-2020-16117
2020-07-29 18:15:14
rocky
rocky
evolution security, bug fix, and enhancement update
2021-05-18 06:00:34
veracode
veracode
Denial Of Service (DoS)
2021-05-20 15:27:37
redhat
redhat
(RHSA-2021:1752) Low: evolution security, bug fix, and enhancement update
2021-05-18 06:00:34
prion
prion
Null pointer dereference
2020-07-29 18:15:00
oraclelinux
oraclelinux
evolution security, bug fix, and enhancement update
2021-05-25 00:00:00
almalinux
almalinux
Low: evolution security, bug fix, and enhancement update
2021-05-18 06:00:34
ubuntucve
ubuntucve
CVE-2020-16117
2020-07-29 00:00:00
debiancve
debiancve
CVE-2020-16117
2020-07-29 18:15:14
mageia
mageia
Updated evolution-data-server packages fix security vulnerabilities
2020-08-28 17:46:59
suse
suse
Security update for evolution-data-server (moderate)
2021-03-28 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1831
2021-07-02 16:39:45