Vulnerability Details CVE-2020-16117
In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid (e.g., minimal) CAPABILITY line on a connection attempt. This is related to imapx_free_capability and imapx_connect_to_server.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 56.4%
CVSS Severity
CVSS v3 Score 5.9
CVSS v2 Score 4.3
Products affected by CVE-2020-16117
-
cpe:2.3:a:gnome:evolution-data-server:-
-
cpe:2.3:a:gnome:evolution-data-server:3.22.0
-
cpe:2.3:a:gnome:evolution-data-server:3.22.1
-
cpe:2.3:a:gnome:evolution-data-server:3.22.2
-
cpe:2.3:a:gnome:evolution-data-server:3.22.3
-
cpe:2.3:a:gnome:evolution-data-server:3.22.4
-
cpe:2.3:a:gnome:evolution-data-server:3.22.5
-
cpe:2.3:a:gnome:evolution-data-server:3.22.6
-
cpe:2.3:a:gnome:evolution-data-server:3.22.7
-
cpe:2.3:a:gnome:evolution-data-server:3.23.1
-
cpe:2.3:a:gnome:evolution-data-server:3.23.2
-
cpe:2.3:a:gnome:evolution-data-server:3.23.3
-
cpe:2.3:a:gnome:evolution-data-server:3.23.4
-
cpe:2.3:a:gnome:evolution-data-server:3.23.90
-
cpe:2.3:a:gnome:evolution-data-server:3.23.91
-
cpe:2.3:a:gnome:evolution-data-server:3.23.92
-
cpe:2.3:a:gnome:evolution-data-server:3.24.0
-
cpe:2.3:a:gnome:evolution-data-server:3.24.1
-
cpe:2.3:a:gnome:evolution-data-server:3.24.2
-
cpe:2.3:a:gnome:evolution-data-server:3.24.3
-
cpe:2.3:a:gnome:evolution-data-server:3.24.4
-
cpe:2.3:a:gnome:evolution-data-server:3.24.5
-
cpe:2.3:a:gnome:evolution-data-server:3.24.6
-
cpe:2.3:a:gnome:evolution-data-server:3.24.7
-
cpe:2.3:a:gnome:evolution-data-server:3.25.1
-
cpe:2.3:a:gnome:evolution-data-server:3.25.2
-
cpe:2.3:a:gnome:evolution-data-server:3.25.3
-
cpe:2.3:a:gnome:evolution-data-server:3.25.4
-
cpe:2.3:a:gnome:evolution-data-server:3.25.90
-
cpe:2.3:a:gnome:evolution-data-server:3.25.91
-
cpe:2.3:a:gnome:evolution-data-server:3.25.92
-
cpe:2.3:a:gnome:evolution-data-server:3.26.0
-
cpe:2.3:a:gnome:evolution-data-server:3.26.1
-
cpe:2.3:a:gnome:evolution-data-server:3.26.2
-
cpe:2.3:a:gnome:evolution-data-server:3.26.2.1
-
cpe:2.3:a:gnome:evolution-data-server:3.26.3
-
cpe:2.3:a:gnome:evolution-data-server:3.26.4
-
cpe:2.3:a:gnome:evolution-data-server:3.26.5
-
cpe:2.3:a:gnome:evolution-data-server:3.26.6
-
cpe:2.3:a:gnome:evolution-data-server:3.27.1
-
cpe:2.3:a:gnome:evolution-data-server:3.27.2
-
cpe:2.3:a:gnome:evolution-data-server:3.27.3
-
cpe:2.3:a:gnome:evolution-data-server:3.27.4
-
cpe:2.3:a:gnome:evolution-data-server:3.27.90
-
cpe:2.3:a:gnome:evolution-data-server:3.27.91
-
cpe:2.3:a:gnome:evolution-data-server:3.27.92
-
cpe:2.3:a:gnome:evolution-data-server:3.28.0
-
cpe:2.3:a:gnome:evolution-data-server:3.28.1
-
cpe:2.3:a:gnome:evolution-data-server:3.28.2
-
cpe:2.3:a:gnome:evolution-data-server:3.28.3
-
cpe:2.3:a:gnome:evolution-data-server:3.28.4
-
cpe:2.3:a:gnome:evolution-data-server:3.28.5
-
cpe:2.3:a:gnome:evolution-data-server:3.29.1
-
cpe:2.3:a:gnome:evolution-data-server:3.29.2
-
cpe:2.3:a:gnome:evolution-data-server:3.29.3
-
cpe:2.3:a:gnome:evolution-data-server:3.29.4
-
cpe:2.3:a:gnome:evolution-data-server:3.29.90
-
cpe:2.3:a:gnome:evolution-data-server:3.29.91
-
cpe:2.3:a:gnome:evolution-data-server:3.29.92
-
cpe:2.3:a:gnome:evolution-data-server:3.30.0
-
cpe:2.3:a:gnome:evolution-data-server:3.30.1
-
cpe:2.3:a:gnome:evolution-data-server:3.30.2
-
cpe:2.3:a:gnome:evolution-data-server:3.30.3
-
cpe:2.3:a:gnome:evolution-data-server:3.30.4
-
cpe:2.3:a:gnome:evolution-data-server:3.30.5
-
cpe:2.3:a:gnome:evolution-data-server:3.31.1
-
cpe:2.3:a:gnome:evolution-data-server:3.31.2
-
cpe:2.3:a:gnome:evolution-data-server:3.31.3
-
cpe:2.3:a:gnome:evolution-data-server:3.31.4
-
cpe:2.3:a:gnome:evolution-data-server:3.31.90
-
cpe:2.3:a:gnome:evolution-data-server:3.31.91
-
cpe:2.3:a:gnome:evolution-data-server:3.31.92
-
cpe:2.3:a:gnome:evolution-data-server:3.32.0
-
cpe:2.3:a:gnome:evolution-data-server:3.32.1
-
cpe:2.3:a:gnome:evolution-data-server:3.32.2
-
cpe:2.3:a:gnome:evolution-data-server:3.32.3
-
cpe:2.3:a:gnome:evolution-data-server:3.32.4
-
cpe:2.3:a:gnome:evolution-data-server:3.32.5
-
cpe:2.3:a:gnome:evolution-data-server:3.33.1
-
cpe:2.3:a:gnome:evolution-data-server:3.33.2
-
cpe:2.3:a:gnome:evolution-data-server:3.33.3
-
cpe:2.3:a:gnome:evolution-data-server:3.33.4
-
cpe:2.3:a:gnome:evolution-data-server:3.33.90
-
cpe:2.3:a:gnome:evolution-data-server:3.33.91
-
cpe:2.3:a:gnome:evolution-data-server:3.33.92
-
cpe:2.3:a:gnome:evolution-data-server:3.34.0
-
cpe:2.3:a:gnome:evolution-data-server:3.34.1
-
cpe:2.3:a:gnome:evolution-data-server:3.34.2
-
cpe:2.3:a:gnome:evolution-data-server:3.34.3
-
cpe:2.3:a:gnome:evolution-data-server:3.34.4
-
cpe:2.3:a:gnome:evolution-data-server:3.35.1
-
cpe:2.3:a:gnome:evolution-data-server:3.35.2
-
cpe:2.3:a:gnome:evolution-data-server:3.35.3
-
cpe:2.3:o:debian:debian_linux:9.0