GNOME Evolution through 3.28.2 is prone to OpenPGP signatures being spoofed for arbitrary messages using a specially crafted email that contains a valid signature from the entity to be impersonated as an attachment.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-evolution-ewsalma-upgrade-evolution-ews-langpacks | May 4, 2022 | Feb 11, 2019 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-evolutionamazon-linux-ami-2-upgrade-evolution-bogofilteramazon-linux-ami-2-upgrade-evolution-debuginfoamazon-linux-ami-2-upgrade-evolution-develamazon-linux-ami-2-upgrade-evolution-devel-docsamazon-linux-ami-2-upgrade-evolution-helpamazon-linux-ami-2-upgrade-evolution-langpacksamazon-linux-ami-2-upgrade-evolution-pstamazon-linux-ami-2-upgrade-evolution-spamassassin | Aug 25, 2020 | Feb 11, 2019 | |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Feb 11, 2019 | |
| Centos_linux | — | centos-upgrade-evolutioncentos-upgrade-evolution-bogofiltercentos-upgrade-evolution-bogofilter-debuginfocentos-upgrade-evolution-data-servercentos-upgrade-evolution-data-server-debuginfocentos-upgrade-evolution-data-server-debugsourcecentos-upgrade-evolution-data-server-develcentos-upgrade-evolution-data-server-doccentos-upgrade-evolution-data-server-langpackscentos-upgrade-evolution-data-server-perlcentos-upgrade-evolution-data-server-testscentos-upgrade-evolution-data-server-tests-debuginfocentos-upgrade-evolution-debuginfocentos-upgrade-evolution-debugsourcecentos-upgrade-evolution-develcentos-upgrade-evolution-devel-docscentos-upgrade-evolution-ewscentos-upgrade-evolution-ews-debuginfocentos-upgrade-evolution-ews-debugsourcecentos-upgrade-evolution-ews-langpackscentos-upgrade-evolution-helpcentos-upgrade-evolution-langpackscentos-upgrade-evolution-pstcentos-upgrade-evolution-pst-debuginfocentos-upgrade-evolution-spamassassincentos-upgrade-evolution-spamassassin-debuginfo | Apr 1, 2020 | Feb 11, 2019 |
| Debian | debian-upgrade-evolution | Apr 29, 2019 | Feb 11, 2019 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-evolutionhuawei-euleros-2_0_sp2-upgrade-evolution-help | Feb 22, 2021 | Feb 11, 2019 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-evolutionhuawei-euleros-2_0_sp3-upgrade-evolution-help | Apr 30, 2021 | Feb 11, 2019 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-evolutionhuawei-euleros-2_0_sp5-upgrade-evolution-help | Dec 16, 2020 | Feb 11, 2019 | |
| Oracle_linux | — | oracle-linux-upgrade-atkoracle-linux-upgrade-atk-develoracle-linux-upgrade-evolutionoracle-linux-upgrade-evolution-bogofilteroracle-linux-upgrade-evolution-data-serveroracle-linux-upgrade-evolution-data-server-develoracle-linux-upgrade-evolution-data-server-docoracle-linux-upgrade-evolution-data-server-langpacksoracle-linux-upgrade-evolution-data-server-perloracle-linux-upgrade-evolution-data-server-testsoracle-linux-upgrade-evolution-develoracle-linux-upgrade-evolution-devel-docsoracle-linux-upgrade-evolution-ewsoracle-linux-upgrade-evolution-ews-langpacksoracle-linux-upgrade-evolution-helporacle-linux-upgrade-evolution-langpacksoracle-linux-upgrade-evolution-pstoracle-linux-upgrade-evolution-spamassassin | Oct 5, 2022 | May 27, 2018 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-atkredhat-upgrade-atk-debuginforedhat-upgrade-atk-develredhat-upgrade-evolutionredhat-upgrade-evolution-bogofilterredhat-upgrade-evolution-bogofilter-debuginforedhat-upgrade-evolution-data-serverredhat-upgrade-evolution-data-server-debuginforedhat-upgrade-evolution-data-server-debugsourceredhat-upgrade-evolution-data-server-develredhat-upgrade-evolution-data-server-docredhat-upgrade-evolution-data-server-langpacksredhat-upgrade-evolution-data-server-perlredhat-upgrade-evolution-data-server-testsredhat-upgrade-evolution-data-server-tests-debuginforedhat-upgrade-evolution-debuginforedhat-upgrade-evolution-debugsourceredhat-upgrade-evolution-develredhat-upgrade-evolution-devel-docsredhat-upgrade-evolution-ewsredhat-upgrade-evolution-ews-debuginforedhat-upgrade-evolution-ews-debugsourceredhat-upgrade-evolution-ews-langpacksredhat-upgrade-evolution-helpredhat-upgrade-evolution-langpacksredhat-upgrade-evolution-pstredhat-upgrade-evolution-pst-debuginforedhat-upgrade-evolution-spamassassinredhat-upgrade-evolution-spamassassin-debuginfo | Apr 1, 2020 | Feb 11, 2019 | |
| Suse | — | suse-upgrade-evolutionsuse-upgrade-evolution-develsuse-upgrade-evolution-langsuse-upgrade-evolution-plugin-bogofiltersuse-upgrade-evolution-plugin-pst-importsuse-upgrade-evolution-plugin-spamassassinsuse-upgrade-evolution-plugin-text-highlightsuse-upgrade-glade-catalog-evolution | May 24, 2019 | Feb 11, 2019 |
| Ubuntu | ubuntu-upgrade-evolution-data-serverubuntu-upgrade-evolution-data-server-commonubuntu-upgrade-libcamel-1-2-54ubuntu-upgrade-libcamel-1-2-61ubuntu-upgrade-libebackend-1-2-10ubuntu-upgrade-libedataserver-1-2-21ubuntu-upgrade-libedataserver-1-2-23 | May 31, 2019 | Feb 11, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub