evolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and POP3. When a server sends a "begin TLS" response, eds reads additional data and evaluates it in a TLS context, aka "response injection."
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade evolution-data-server-docUpgrade evolution-develUpgrade bogofilterUpgrade evolution-data-server-perlUpgrade evolution-data-server-tests | May 4, 2022 | Jul 17, 2020 |
| Centos_linux | — | Upgrade evolution-data-serverUpgrade evolution-spamassassinUpgrade evolution-mapi-debugsourceUpgrade evolution-data-server-develUpgrade evolution-mapiUpgrade evolution-bogofilterUpgrade bogofilterUpgrade evolution-mapi-langpacksUpgrade evolution-debugsourceUpgrade openchangeUpgrade evolution-data-server-tests-debuginfoUpgrade evolution-bogofilter-debuginfoUpgrade evolution-helpUpgrade openchange-client-debuginfoUpgrade evolution-spamassassin-debuginfoUpgrade evolution-pstUpgrade evolution-pst-debuginfoUpgrade evolution-data-server-langpacksUpgrade bogofilter-debugsourceUpgrade bogofilter-debuginfoUpgrade evolutionUpgrade evolution-data-server-debuginfoUpgrade openchange-debuginfoUpgrade evolution-debuginfoUpgrade evolution-mapi-debuginfoUpgrade openchange-debugsourceUpgrade evolution-data-server-debugsourceUpgrade evolution-langpacks | Nov 5, 2020 | Jul 17, 2020 |
| Debian | — | Upgrade evolution-data-server | Jul 17, 2020 | Jul 17, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade evolution-data-serverUpgrade evolution-data-server-devel | Feb 22, 2021 | Jul 17, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade evolution-data-serverUpgrade evolution-data-server-devel | Apr 30, 2021 | Jul 17, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade evolution-data-server-develUpgrade evolution-data-server | Nov 2, 2020 | Jul 17, 2020 |
| Oracle Solaris | — | Upgrade library/desktop/evolution-data-server to version 3.34.0-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Jul 17, 2020 |
| Oracle_linux | — | Upgrade evolution-develUpgrade evolution-mapi-langpacksUpgrade evolution-bogofilterUpgrade evolutionUpgrade evolution-pstUpgrade evolution-data-server-testsUpgrade openchangeUpgrade evolution-mapiUpgrade evolution-data-server-develUpgrade evolution-helpUpgrade evolution-data-server-langpacksUpgrade evolution-spamassassinUpgrade evolution-data-serverUpgrade evolution-data-server-perlUpgrade bogofilterUpgrade evolution-langpacksUpgrade evolution-data-server-doc | Nov 12, 2020 | Jul 4, 2020 |
| Redhat_linux | — | Upgrade evolution-pst-debuginfoUpgrade evolution-spamassassin-debuginfoUpgrade evolution-spamassassinUpgrade evolution-mapi-debuginfoUpgrade evolutionUpgrade bogofilter-debuginfoUpgrade evolution-langpacksUpgrade evolution-data-server-langpacksUpgrade evolution-debugsourceUpgrade evolution-develUpgrade bogofilter-debugsourceUpgrade evolution-data-server-debuginfoUpgrade evolution-data-server-testsUpgrade evolution-data-server-debugsourceUpgrade evolution-bogofilterUpgrade evolution-data-server-perlUpgrade openchange-debuginfoUpgrade evolution-helpUpgrade evolution-data-server-develUpgrade evolution-data-server-docUpgrade evolution-data-serverNo solution existsUpgrade bogofilterUpgrade openchange-debugsourceUpgrade evolution-debuginfoUpgrade evolution-bogofilter-debuginfoUpgrade evolution-pstUpgrade evolution-mapi-langpacksUpgrade evolution-mapi-debugsourceUpgrade evolution-data-server-tests-debuginfoUpgrade evolution-mapiUpgrade openchangeUpgrade openchange-client-debuginfo | Nov 5, 2020 | Jul 17, 2020 |
| Rocky_linux | — | Upgrade bogofilter-debuginfoUpgrade evolution-mapiUpgrade bogofilter-debugsourceUpgrade evolution-mapi-debuginfoUpgrade bogofilterUpgrade evolution-mapi-debugsource | Mar 12, 2024 | Jul 17, 2020 |
| Suse | — | Upgrade libebook-contacts-1_2-3-32bitUpgrade libedataserverui-1_2-2-32bitUpgrade libebook-1_2-16Upgrade evolution-ewsUpgrade libcamel-1_2-59Upgrade typelib-1_0-EDataServer-1_2Upgrade libcamel-1_2-59-32bitUpgrade libedataserver-1_2-24Upgrade libedata-book-1_2-26-32bitUpgrade typelib-1_0-EDataServerUI-1_2Upgrade libedataserver-1_2-22Upgrade libebackend-1_2-10Upgrade libedata-cal-1_2-28-32bitUpgrade libecal-2_0-1-32bitUpgrade evolution-ews-langUpgrade libecal-1_2-19Upgrade libebook-contacts-1_2-2-32bitUpgrade libedata-cal-2_0-1-32bitUpgrade libecal-2_0-1Upgrade typelib-1_0-Camel-1_2Upgrade evolution-data-serverUpgrade evolution-data-server-32bitUpgrade evolution-data-server-develUpgrade libedataserver-1_2-21Upgrade typelib-1_0-EBook-1_2Upgrade typelib-1_0-EDataBook-1_2Upgrade libedataserverui-1_2-2Upgrade libedataserver-1_2-22-32bitUpgrade libedataserverui-1_2-1Upgrade libcamel-1_2-62-32bitUpgrade libedata-book-1_2-25Upgrade libebook-1_2-20Upgrade libecal-1_2-19-32bitUpgrade libedata-book-1_2-26Upgrade libebook-contacts-1_2-3Upgrade libebook-1_2-16-32bitUpgrade libedata-cal-1_2-28Upgrade typelib-1_0-EBackend-1_2Upgrade libedata-cal-2_0-1Upgrade libcamel-1_2-62Upgrade libedata-book-1_2-25-32bitUpgrade evolution-data-server-langUpgrade libedataserver-1_2-24-32bitUpgrade libebackend-1_2-10-32bitUpgrade libcamel-1_2-57Upgrade libebook-contacts-1_2-2Upgrade typelib-1_0-ECal-2_0Upgrade libebook-1_2-20-32bitUpgrade typelib-1_0-EBookContacts-1_2Upgrade typelib-1_0-EDataCal-2_0 | Mar 20, 2021 | Jul 17, 2020 |
| Ubuntu | — | Upgrade libedataserver-1.2-21Upgrade evolution-data-server-commonUpgrade libcamel-1.2-61Upgrade libcamel-1.2-54Upgrade libedataserver-1.2-23Upgrade evolution-data-serverUpgrade libcamel-1.2-62Upgrade libedataserver-1.2-24Upgrade libebackend-1.2-10 | Aug 5, 2020 | Jul 17, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub