Every CVE Search/ Get API key

CVE-2020-16117

In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with...

5.9 MediumFix available

In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid (e.g., minimal) CAPABILITY line on a connection attempt. This is related to imapx_free_capability and imapx_connect_to_server.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

2.12%Up 1.1 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 5.9

In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid (e.g., minimal) CAPABILITY line on a connection attempt. This is related to imapx_free_capability and imapx_connect_to_server.

Record
CVE-2020-16117
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Weakness
CWE-476
Updated
2026-11-02
CVE List No score

In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid (e.g., minimal) CAPABILITY line on a connection attempt. This is related to imapx_free_capability and imapx_connect_to_server.

Record
CVE-2020-16117
Updated
2026-11-02
EUVDEUVD-2020-8083 No score

In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid (e.g., minimal) CAPABILITY line on a connection attempt. This is related to imapx_free_capability and imapx_connect_to_server.

Record
EUVD-2020-8083
Updated
2026-11-03
GitHub AdvisoriesGHSA-j89v-2w65-5qmq No score

In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with...

In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid (e.g., minimal) CAPABILITY line on a connection attempt. This is related to imapx_free_capability and imapx_connect_to_server.

Record
GHSA-j89v-2w65-5qmq
Updated
2026-11-02
OSV 5.9

In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid (e.g., minimal) CAPABILITY line on a connection attempt. This is related to imapx_free_capability and imapx_connect_to_server.

Record
CVE-2020-16117
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2020-16117 5.9

In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid (e.g., minimal) CAPABILITY line on a connection attempt. This is related to imapx_free_capability and imapx_connect_to_server.

Record
DEBIAN-CVE-2020-16117
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 11 moreShow less
OSVOESA-2022-1628 5.9

evolution-data-server security update

The evolution-data-server package provides a personal information management application that provides integrated mail, calendaring and address book functionality. The evolution-data-server package provides a single database for common, desktop-wide information, such as a user's address book or calendar events.

Security Fix(es):

In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid (e.g., minimal) CAPABILITY line on a connection attempt. This is related to imapx_free_capability and imapx_connect_to_server.(CVE-2020-16117)

Record
OESA-2022-1628
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2021:1752 5.9

Red Hat Security Advisory: evolution security, bug fix, and enhancement update

Record
RHSA-2021:1752
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2021:1752 5.9

Low: evolution security, bug fix, and enhancement update

Evolution is a GNOME application that provides integrated email, calendar, contact management, and communications functionality.

The evolution-data-server packages provide a unified back end for applications which interact with contacts, tasks and calendar information. Evolution Data Server was originally developed as a back end for the Evolution information management application, but is now used by various other applications.

Security Fix(es):

  • evolution-data-server: NULL pointer dereference related to imapx_free_capability and imapx_connect_to_server (CVE-2020-16117)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.4 Release Notes linked from the References section.

Record
RLSA-2021:1752
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2020-16117 5.9

In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid (e.g., minimal) CAPABILITY line on a connection attempt. This is related to imapx_free_capability and imapx_connect_to_server.

Record
UBUNTU-CVE-2020-16117
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2021:1752 No score

Low: evolution security, bug fix, and enhancement update

Evolution is a GNOME application that provides integrated email, calendar, contact management, and communications functionality.

The evolution-data-server packages provide a unified back end for applications which interact with contacts, tasks and calendar information. Evolution Data Server was originally developed as a back end for the Evolution information management application, but is now used by various other applications.

Security Fix(es):

  • evolution-data-server: NULL pointer dereference related to imapx_free_capability and imapx_connect_to_server (CVE-2020-16117)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2021:1752
Updated
2026-11-02
OSVMGASA-2020-0351 No score

Updated evolution-data-server packages fix security vulnerabilities

evolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and POP3. When a server sends a "begin TLS" response, eds reads additional data and evaluates it in a TLS context, aka "response injection". (CVE-2020-14928)

In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid (e.g., minimal) CAPABILITY line on a connection attempt. This is related to imapx_free_capability and imapx_connect_to_server. (CVE-2020-16117)

Record
MGASA-2020-0351
Updated
2026-11-02
OSVopenSUSE-SU-2021:0482-1 No score

Security update for evolution-data-server

This update for evolution-data-server fixes the following issues:

  • CVE-2020-16117: Fix crash on malformed server response with minimal capabilities (bsc#1174712).
  • CVE-2020-14928: Response injection via STARTTLS in SMTP and POP3 (bsc#1173910).
  • Fix buffer overrun when parsing base64 data (bsc#1182882).

This update for evolution-ews fixes the following issue:

  • Fix buffer overrun when parsing base64 data (bsc#1182882).

This update was imported from the SUSE:SLE-15-SP2:Update update project.

Record
openSUSE-SU-2021:0482-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10744-1 No score

evolution-data-server-3.40.4-1.4 on GA media

These are all security issues fixed in the evolution-data-server-3.40.4-1.4 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10744-1
Updated
2026-11-02
OSVSUSE-SU-2021:0885-1 No score

Security update for evolution-data-server

This update for evolution-data-server fixes the following issues:

  • Fix buffer overrun when parsing base64 data (bsc#1182882).
  • CVE-2020-16117: Fix crash on malformed server response with minimal capabilities (bsc#1174712).
  • CVE-2020-14928: Response injection via STARTTLS in SMTP and POP3 (bsc#1173910).
Record
SUSE-SU-2021:0885-1
Updated
2026-11-02
OSVSUSE-SU-2021:0891-1 No score

Security update for evolution-data-server

This update for evolution-data-server fixes the following issues:

  • Fix buffer overrun when parsing base64 data (bsc#1182882).
  • CVE-2020-16117: Fix crash on malformed server response with minimal capabilities (bsc#1174712).
  • CVE-2020-14928: Response injection via STARTTLS in SMTP and POP3 (bsc#1173910).
Record
SUSE-SU-2021:0891-1
Updated
2026-11-02
OSVSUSE-SU-2021:0949-1 No score

Security update for evolution-data-server

This update for evolution-data-server fixes the following issues:

  • CVE-2020-16117: Fix crash on malformed server response with minimal capabilities (bsc#1174712).
  • CVE-2020-14928: Response injection via STARTTLS in SMTP and POP3 (bsc#1173910).
  • Fix buffer overrun when parsing base64 data (bsc#1182882).

This update for evolution-ews fixes the following issue:

  • Fix buffer overrun when parsing base64 data (bsc#1182882).
Record
SUSE-SU-2021:0949-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
evolution-data-server-doc
AlmaLinux:8
 before 3.28.5-15.el8
3.28.5-15.el8
evolution-data-server-perl
AlmaLinux:8
 before 3.28.5-15.el8
3.28.5-15.el8
evolution-data-server-tests
AlmaLinux:8
 before 3.28.5-15.el8
3.28.5-15.el8
evolution-devel
AlmaLinux:8
 before 3.28.5-16.el8
3.28.5-16.el8
evolution-data-server
Debian:12
 before 3.36.0-1
3.36.0-1
evolution-data-server
Debian:13
 before 3.36.0-1
3.36.0-1
evolution-data-server
Debian:14
 before 3.36.0-1
3.36.0-1
evolution-data-server
Debian:9
 before 3.22.7-1+deb9u2, plus listed versions
3.22.7-13.22.7-1+deb9u1
3.22.7-1+deb9u2
evolution-data-server
Mageia:7
From an advisory covering 2 CVEs
 before 3.32.2-1.2.mga7
3.32.2-1.2.mga7
evolution-data-server
openEuler:20.03-LTS-SP1
 before 3.30.1-4.oe1
3.30.1-4.oe1
Show 47 moreShow less
Affected packages
PackageAffectedFixed
evolution-data-server
openEuler:20.03-LTS-SP3
 before 3.30.1-4.oe1
3.30.1-4.oe1
evolution
Red Hat:enterprise_linux:8::appstream
 before 0:3.28.5-16.el8
0:3.28.5-16.el8
evolution-bogofilter
Red Hat:enterprise_linux:8::appstream
 before 0:3.28.5-16.el8
0:3.28.5-16.el8
evolution-bogofilter-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:3.28.5-16.el8
0:3.28.5-16.el8
evolution-data-server
Red Hat:enterprise_linux:8::appstream
 before 0:3.28.5-15.el8
0:3.28.5-15.el8
evolution-data-server-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:3.28.5-15.el8
0:3.28.5-15.el8
evolution-data-server-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:3.28.5-15.el8
0:3.28.5-15.el8
evolution-data-server-devel
Red Hat:enterprise_linux:8::appstream
 before 0:3.28.5-15.el8
0:3.28.5-15.el8
evolution-data-server-langpacks
Red Hat:enterprise_linux:8::appstream
 before 0:3.28.5-15.el8
0:3.28.5-15.el8
evolution-data-server-tests-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:3.28.5-15.el8
0:3.28.5-15.el8
evolution-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:3.28.5-16.el8
0:3.28.5-16.el8
evolution-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:3.28.5-16.el8
0:3.28.5-16.el8
evolution-ews
Red Hat:enterprise_linux:8::appstream
 before 0:3.28.5-10.el8
0:3.28.5-10.el8
evolution-ews-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:3.28.5-10.el8
0:3.28.5-10.el8
evolution-ews-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:3.28.5-10.el8
0:3.28.5-10.el8
evolution-ews-langpacks
Red Hat:enterprise_linux:8::appstream
 before 0:3.28.5-10.el8
0:3.28.5-10.el8
evolution-help
Red Hat:enterprise_linux:8::appstream
 before 0:3.28.5-16.el8
0:3.28.5-16.el8
evolution-langpacks
Red Hat:enterprise_linux:8::appstream
 before 0:3.28.5-16.el8
0:3.28.5-16.el8
evolution-pst
Red Hat:enterprise_linux:8::appstream
 before 0:3.28.5-16.el8
0:3.28.5-16.el8
evolution-pst-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:3.28.5-16.el8
0:3.28.5-16.el8
evolution-spamassassin
Red Hat:enterprise_linux:8::appstream
 before 0:3.28.5-16.el8
0:3.28.5-16.el8
evolution-spamassassin-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:3.28.5-16.el8
0:3.28.5-16.el8
evolution-bogofilter-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:3.28.5-16.el8
0:3.28.5-16.el8
evolution-data-server-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:3.28.5-15.el8
0:3.28.5-15.el8
evolution-data-server-debugsource
Red Hat:enterprise_linux:8::crb
 before 0:3.28.5-15.el8
0:3.28.5-15.el8
evolution-data-server-doc
Red Hat:enterprise_linux:8::crb
 before 0:3.28.5-15.el8
0:3.28.5-15.el8
evolution-data-server-perl
Red Hat:enterprise_linux:8::crb
 before 0:3.28.5-15.el8
0:3.28.5-15.el8
evolution-data-server-tests
Red Hat:enterprise_linux:8::crb
 before 0:3.28.5-15.el8
0:3.28.5-15.el8
evolution-data-server-tests-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:3.28.5-15.el8
0:3.28.5-15.el8
evolution-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:3.28.5-16.el8
0:3.28.5-16.el8
evolution-debugsource
Red Hat:enterprise_linux:8::crb
 before 0:3.28.5-16.el8
0:3.28.5-16.el8
evolution-devel
Red Hat:enterprise_linux:8::crb
 before 0:3.28.5-16.el8
0:3.28.5-16.el8
evolution-pst-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:3.28.5-16.el8
0:3.28.5-16.el8
evolution-spamassassin-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:3.28.5-16.el8
0:3.28.5-16.el8
evolution
Rocky Linux:8
 before 0:3.28.5-16.el8
0:3.28.5-16.el8
evolution-data-server
Rocky Linux:8
 before 0:3.28.5-15.el8
0:3.28.5-15.el8
evolution-ews
Rocky Linux:8
 before 0:3.28.5-10.el8
0:3.28.5-10.el8
evolution-data-server
SUSE:Linux Enterprise Workstation Extension 12 SP5
From an advisory covering 2 CVEs
 before 3.20.6-17.3.1
3.20.6-17.3.1
evolution-data-server
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 2 CVEs
 before 3.22.7-18.7.1
3.22.7-18.7.1
evolution-data-server
SUSE:Linux Enterprise Workstation Extension 12 SP5
From an advisory covering 2 CVEs
 before 3.22.7-18.7.1
3.22.7-18.7.1
evolution-data-server
SUSE:Linux Enterprise Workstation Extension 15 SP2
From an advisory covering 2 CVEs
 before 3.34.4-3.3.1
3.34.4-3.3.1
evolution-ews
SUSE:Linux Enterprise Workstation Extension 15 SP2
From an advisory covering 2 CVEs
 before 3.34.4-3.3.1
3.34.4-3.3.1
evolution-data-server
Ubuntu:16.04:LTS
 All versions, plus listed versions
3.16.5-1ubuntu33.18.1-1ubuntu13.18.2-0ubuntu13.18.2-0ubuntu23.18.3-1ubuntu1
Show 6 moreShow less
3.18.3-1ubuntu23.18.4-0ubuntu13.18.5-1ubuntu13.18.5-1ubuntu1.13.18.5-1ubuntu1.23.18.5-1ubuntu1.3
 None known
evolution-data-server
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
3.26.1-1ubuntu13.26.2-1ubuntu13.26.2.1-1ubuntu13.26.2.1-1ubuntu33.26.3-1ubuntu1
Show 11 moreShow less
3.26.5-1ubuntu33.27.90-1ubuntu13.28.0-1ubuntu13.28.0-2ubuntu13.28.0-2ubuntu23.28.1-1ubuntu13.28.3-0ubuntu0.18.04.13.28.5-0ubuntu0.18.04.13.28.5-0ubuntu0.18.04.23.28.5-0ubuntu0.18.04.33.28.5-0ubuntu0.18.04.3+esm1
 None known
evolution-data-server
openSUSE:Leap 15.2
From an advisory covering 2 CVEs
 before 3.34.4-lp152.2.3.1
3.34.4-lp152.2.3.1
evolution-ews
openSUSE:Leap 15.2
From an advisory covering 2 CVEs
 before 3.34.4-lp152.2.3.1
3.34.4-lp152.2.3.1
evolution-data-server
openSUSE:Tumbleweed
From an advisory covering 3 CVEs
 before 3.40.4-1.4
3.40.4-1.4

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-16117 is a medium vulnerability (CVSS 5.9) in Gnome Evolution-data-server, published July 29, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.12%, the 82nd percentile. Fixed in evolution-data-server-doc 3.28.5-15.el8.

References

Show 32 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open