Evolution Data Server

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2020-16117 Jul 29, 18:15 MEDIUM POC PATCH This Month

In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid (e.g., minimal) CAPABILITY line on a connection. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. Public exploit code available.

Denial Of Service Null Pointer Dereference Debian Debian Linux Gnome +1

NVD

CVSS 3.1

5.9

EPSS

2.1%

CVE-2020-14928 Jul 17, 16:15 MEDIUM POC PATCH This Month

evolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and POP3. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. Public exploit code available.

Code Injection Debian Canonical Debian Linux Fedora +4

NVD

CVSS 3.1

5.9

EPSS

2.8%

CVE-2020-16117

EPSS 2% CVSS 5.9

MEDIUM POC PATCH This Month

Denial Of Service Null Pointer Dereference Debian +3

NVD

CVE-2020-14928

EPSS 3% CVSS 5.9

MEDIUM POC PATCH This Month

Code Injection Debian Canonical +6

NVD