Camel (camel-imap-folder.c) in the mailer component for Evolution Data Server 1.11 allows remote IMAP servers to execute arbitrary code via a negative SEQUENCE value in GData, which is used as an array index.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade evolution-data-serverUpgrade evolution | Jul 30, 2024 | Jun 19, 2007 |
| Freebsd | — | Upgrade evolution-data-server | Dec 10, 2025 | Jun 25, 2007 |
| Gentoo Linux | — | Upgrade gnome-extra/evolution-data-server. | Oct 30, 2017 | Jun 19, 2007 |
| Oracle_linux | — | Upgrade evolution-data-server-develUpgrade evolution-data-server | Oct 16, 2024 | Jun 19, 2007 |
| Suse | — | Upgrade evolution-data-server-32bitUpgrade evolution-data-server-x86Upgrade evolution-data-serverUpgrade evolution-data-server-langUpgrade evolution-data-server-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libcamel1.2-10Upgrade libcamel1.2-8 | Nov 8, 2024 | Jun 19, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub