addressbook/backends/ldap/e-book-backend-ldap.c in Evolution-Data-Server in GNOME Evolution through 3.29.2 might allow attackers to trigger a Buffer Overflow via a long query that is processed by the strcat function. NOTE: the software maintainer disputes this because "the code had computed the required string length first, and then allocated a large-enough buffer on the heap.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade evolution-data-server | Jul 30, 2024 | Jun 15, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade evolution-data-server-develUpgrade evolution-data-server | Feb 22, 2021 | Jun 15, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade evolution-data-server-develUpgrade evolution-data-server | Jan 20, 2021 | Jun 15, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade evolution-data-serverUpgrade evolution-data-server-devel | Dec 16, 2020 | Jun 15, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 15, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub