Red Hat Security AdvisoryRHSA-2021:1752
evolution security, bug fix, and enhancement update
Released 2021-05-18 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 8) evolution-data-server-doc-3.28.5-15.el8, evolution-data-server-perl-3.28.5-15.el8, evolution-data-server-tests-3.28.5-15.el8 +1
- Red Hat Enterprise Linux AppStream (v. 8) evolution-3.28.5-16.el8, evolution-bogofilter-3.28.5-16.el8, evolution-data-server-3.28.5-15.el8 +8
Fixes 1 record
Priority LOW 31
In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid (e.g., minimal) CAPABILITY line on a connection attempt.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.02123 · Published 2020-07-29 · Partial fix CWE-476
