HrAddFBBlock in libfreebusy/freebusyutil.cpp in Kopano Groupware Core before 8.7.7 allows out-of-bounds access, as demonstrated by mishandling of an array copy during parsing of ICal data.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade kopanocore | Mar 8, 2023 | Dec 19, 2019 |
| Ubuntu | — | Upgrade kopano-libsUpgrade python-mapi (Ubuntu Pro)Upgrade kopano-archiver (Ubuntu Pro)Upgrade python3-mapiUpgrade kopano-utils (Ubuntu Pro)Upgrade kopano-spoolerUpgrade kopano-gatewayUpgrade kopano-ical (Ubuntu Pro)Upgrade kopano-utilsUpgrade kopano-dagentUpgrade kopano-contactsUpgrade kopano-contacts (Ubuntu Pro)Upgrade kopano-icalUpgrade kopano-server (Ubuntu Pro)Upgrade kopano-monitorUpgrade kopano-gateway (Ubuntu Pro)Upgrade kopano-monitor (Ubuntu Pro)Upgrade php-mapi (Ubuntu Pro)Upgrade kopano-dagent (Ubuntu Pro)Upgrade kopano-archiverUpgrade kopano-serverUpgrade kopano-spooler (Ubuntu Pro)Upgrade kopano-libs (Ubuntu Pro)Upgrade php-mapi | Jul 9, 2024 | Dec 19, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub