evolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and POP3. When a server sends a "begin TLS" response, eds reads additional data and evaluates it in a TLS context, aka "response injection."
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade evolution-data-server-testsUpgrade bogofilterUpgrade evolution-data-server-perlUpgrade evolution-data-server-docUpgrade evolution-devel | May 4, 2022 | Jul 17, 2020 |
| Centos_linux | — | Upgrade evolution-data-server-develUpgrade evolution-data-server-tests-debuginfoUpgrade evolution-bogofilterUpgrade evolution-spamassassinUpgrade evolution-data-serverUpgrade openchange-client-debuginfoUpgrade evolution-bogofilter-debuginfoUpgrade evolution-mapi-debugsourceUpgrade bogofilterUpgrade openchangeUpgrade evolution-debugsourceUpgrade evolution-mapi-langpacksUpgrade evolution-mapiUpgrade evolution-helpUpgrade evolution-langpacksUpgrade evolution-data-server-debugsourceUpgrade openchange-debugsourceUpgrade evolution-data-server-debuginfoUpgrade evolution-mapi-debuginfoUpgrade bogofilter-debuginfoUpgrade evolution-spamassassin-debuginfoUpgrade evolution-pstUpgrade evolution-debuginfoUpgrade openchange-debuginfoUpgrade evolution-pst-debuginfoUpgrade evolution-data-server-langpacksUpgrade evolutionUpgrade bogofilter-debugsource | Nov 5, 2020 | Jul 17, 2020 |
| Debian | — | Upgrade evolution-data-server | Jul 17, 2020 | Jul 17, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade evolution-data-serverUpgrade evolution-data-server-devel | Feb 22, 2021 | Jul 17, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade evolution-data-server-develUpgrade evolution-data-server | Apr 30, 2021 | Jul 17, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade evolution-data-server-develUpgrade evolution-data-server | Nov 2, 2020 | Jul 17, 2020 |
| Oracle Solaris | — | Upgrade library/desktop/evolution-data-server to version 3.34.0-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Jul 17, 2020 |
| Oracle_linux | — | Upgrade evolutionUpgrade evolution-mapi-langpacksUpgrade evolution-bogofilterUpgrade evolution-develUpgrade evolution-data-server-testsUpgrade openchangeUpgrade evolution-pstUpgrade evolution-spamassassinUpgrade evolution-langpacksUpgrade bogofilterUpgrade evolution-data-serverUpgrade evolution-helpUpgrade evolution-mapiUpgrade evolution-data-server-docUpgrade evolution-data-server-develUpgrade evolution-data-server-langpacksUpgrade evolution-data-server-perl | Nov 12, 2020 | Jul 4, 2020 |
| Redhat_linux | — | Upgrade bogofilter-debugsourceUpgrade evolutionUpgrade evolution-data-server-langpacksUpgrade evolution-mapi-debuginfoUpgrade evolution-spamassassin-debuginfoUpgrade evolution-data-server-debugsourceUpgrade evolution-data-server-testsUpgrade bogofilter-debuginfoUpgrade evolution-spamassassinUpgrade evolution-data-server-debuginfoUpgrade evolution-langpacksUpgrade evolution-develUpgrade evolution-bogofilterUpgrade evolution-debugsourceUpgrade evolution-pst-debuginfoUpgrade evolution-mapiUpgrade evolution-data-server-perlUpgrade evolution-mapi-langpacksUpgrade evolution-helpUpgrade evolution-debuginfoUpgrade openchange-client-debuginfoUpgrade evolution-bogofilter-debuginfoUpgrade bogofilterNo solution existsUpgrade openchange-debugsourceUpgrade evolution-data-server-docUpgrade openchange-debuginfoUpgrade evolution-data-server-develUpgrade evolution-data-server-tests-debuginfoUpgrade openchangeUpgrade evolution-mapi-debugsourceUpgrade evolution-pstUpgrade evolution-data-server | Nov 5, 2020 | Jul 17, 2020 |
| Rocky_linux | — | Upgrade bogofilterUpgrade evolution-mapi-debugsourceUpgrade evolution-mapi-debuginfoUpgrade bogofilter-debugsourceUpgrade bogofilter-debuginfoUpgrade evolution-mapi | Mar 12, 2024 | Jul 17, 2020 |
| Suse | — | Upgrade typelib-1_0-EDataServer-1_2Upgrade libedataserver-1_2-22Upgrade libedataserverui-1_2-2-32bitUpgrade libedata-book-1_2-26-32bitUpgrade libedataserver-1_2-24Upgrade libcamel-1_2-59-32bitUpgrade libecal-2_0-1-32bitUpgrade libebackend-1_2-10Upgrade typelib-1_0-EDataServerUI-1_2Upgrade libedata-cal-1_2-28-32bitUpgrade typelib-1_0-Camel-1_2Upgrade evolution-ewsUpgrade libecal-1_2-19Upgrade libedata-cal-2_0-1-32bitUpgrade libebook-contacts-1_2-3-32bitUpgrade evolution-ews-langUpgrade libcamel-1_2-59Upgrade libebook-1_2-16Upgrade libecal-2_0-1Upgrade libebook-contacts-1_2-2-32bitUpgrade libebook-contacts-1_2-3Upgrade libedata-book-1_2-26Upgrade libedataserverui-1_2-1Upgrade libedataserver-1_2-22-32bitUpgrade libedata-cal-1_2-28Upgrade libebook-1_2-16-32bitUpgrade libebackend-1_2-10-32bitUpgrade evolution-data-server-develUpgrade evolution-data-server-32bitUpgrade libedata-book-1_2-25Upgrade libecal-1_2-19-32bitUpgrade libcamel-1_2-62-32bitUpgrade typelib-1_0-EBackend-1_2Upgrade typelib-1_0-EBookContacts-1_2Upgrade typelib-1_0-EBook-1_2Upgrade libcamel-1_2-57Upgrade typelib-1_0-ECal-2_0Upgrade libebook-contacts-1_2-2Upgrade libedataserver-1_2-24-32bitUpgrade typelib-1_0-EDataBook-1_2Upgrade libedata-book-1_2-25-32bitUpgrade libedata-cal-2_0-1Upgrade libcamel-1_2-62Upgrade libebook-1_2-20-32bitUpgrade evolution-data-server-langUpgrade typelib-1_0-EDataCal-2_0Upgrade libedataserverui-1_2-2Upgrade evolution-data-serverUpgrade libebook-1_2-20Upgrade libedataserver-1_2-21 | Mar 20, 2021 | Jul 17, 2020 |
| Ubuntu | — | Upgrade libedataserver-1.2-23Upgrade libcamel-1.2-61Upgrade libedataserver-1.2-21Upgrade libcamel-1.2-54Upgrade evolution-data-server-commonUpgrade libebackend-1.2-10Upgrade evolution-data-serverUpgrade libcamel-1.2-62Upgrade libedataserver-1.2-24 | Aug 5, 2020 | Jul 17, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub