{"id":"CVE-2020-16117","aliases":["ALSA-2021:1752","DEBIAN-CVE-2020-16117","DLA-2309-1","EUVD-2020-8083","GHSA-j89v-2w65-5qmq","MGASA-2020-0351","OESA-2022-1628","RHSA-2021:1752","RLSA-2021:1752","SUSE-SU-2021:0885-1","SUSE-SU-2021:0891-1","SUSE-SU-2021:0949-1","UBUNTU-CVE-2020-16117","openSUSE-SU-2021:0482-1","openSUSE-SU-2024:10744-1"],"status":"published","title":"In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with...","description":"In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid (e.g., minimal) CAPABILITY line on a connection attempt. This is related to imapx_free_capability and imapx_connect_to_server.","severity":{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.0197,"percentile":0.80672,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-476"],"published":"2020-07-29T17:59:10Z","modified":"2026-10-29T11:00:32Z","fixes":[{"ecosystem":"AlmaLinux:8","package":"evolution-data-server-doc","fixed_in":["3.28.5-15.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"evolution-data-server-perl","fixed_in":["3.28.5-15.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"evolution-data-server-tests","fixed_in":["3.28.5-15.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"evolution-devel","fixed_in":["3.28.5-16.el8"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"evolution-data-server","fixed_in":["3.36.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"evolution-data-server","fixed_in":["3.36.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"evolution-data-server","fixed_in":["3.36.0-1"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"evolution-data-server","fixed_in":["3.22.7-1+deb9u2"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"evolution-data-server","fixed_in":["3.30.1-4.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"evolution-data-server","fixed_in":["3.30.1-4.oe1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution","fixed_in":["0:3.28.5-16.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-bogofilter","fixed_in":["0:3.28.5-16.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-bogofilter-debuginfo","fixed_in":["0:3.28.5-16.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-data-server","fixed_in":["0:3.28.5-15.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-data-server-debuginfo","fixed_in":["0:3.28.5-15.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-data-server-debugsource","fixed_in":["0:3.28.5-15.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-data-server-devel","fixed_in":["0:3.28.5-15.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-data-server-langpacks","fixed_in":["0:3.28.5-15.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-data-server-tests-debuginfo","fixed_in":["0:3.28.5-15.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-debuginfo","fixed_in":["0:3.28.5-16.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-debugsource","fixed_in":["0:3.28.5-16.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-ews","fixed_in":["0:3.28.5-10.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-ews-debuginfo","fixed_in":["0:3.28.5-10.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-ews-debugsource","fixed_in":["0:3.28.5-10.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-ews-langpacks","fixed_in":["0:3.28.5-10.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-help","fixed_in":["0:3.28.5-16.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-langpacks","fixed_in":["0:3.28.5-16.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-pst","fixed_in":["0:3.28.5-16.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-pst-debuginfo","fixed_in":["0:3.28.5-16.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-spamassassin","fixed_in":["0:3.28.5-16.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-spamassassin-debuginfo","fixed_in":["0:3.28.5-16.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"evolution-bogofilter-debuginfo","fixed_in":["0:3.28.5-16.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"evolution-data-server-debuginfo","fixed_in":["0:3.28.5-15.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"evolution-data-server-debugsource","fixed_in":["0:3.28.5-15.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"evolution-data-server-doc","fixed_in":["0:3.28.5-15.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"evolution-data-server-perl","fixed_in":["0:3.28.5-15.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"evolution-data-server-tests","fixed_in":["0:3.28.5-15.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"evolution-data-server-tests-debuginfo","fixed_in":["0:3.28.5-15.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"evolution-debuginfo","fixed_in":["0:3.28.5-16.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"evolution-debugsource","fixed_in":["0:3.28.5-16.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"evolution-devel","fixed_in":["0:3.28.5-16.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"evolution-pst-debuginfo","fixed_in":["0:3.28.5-16.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"evolution-spamassassin-debuginfo","fixed_in":["0:3.28.5-16.el8"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"evolution","fixed_in":["0:3.28.5-16.el8"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"evolution-data-server","fixed_in":["0:3.28.5-15.el8"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"evolution-ews","fixed_in":["0:3.28.5-10.el8"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"evolution-data-server-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.28.5-15.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"evolution-data-server-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.28.5-15.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"evolution-data-server-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.28.5-15.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"evolution-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.28.5-16.el8"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"evolution-data-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.36.0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"evolution-data-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.36.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"evolution-data-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.36.0-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"evolution-data-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22.7-1+deb9u2"}]}],"versions":["3.22.7-1","3.22.7-1+deb9u1"]},{"source":"osv","ecosystem":"Mageia:7","package":"evolution-data-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.32.2-1.2.mga7"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"evolution-data-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.30.1-4.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"evolution-data-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.30.1-4.oe1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-16.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-bogofilter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-16.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-bogofilter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-16.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-data-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-15.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-data-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-15.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-data-server-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-15.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-data-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-15.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-data-server-langpacks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-15.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-data-server-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-15.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-16.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-16.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-ews","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-10.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-ews-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-10.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-ews-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-10.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-ews-langpacks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-10.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-help","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-16.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-langpacks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-16.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-pst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-16.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-pst-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-16.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-spamassassin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-16.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evolution-spamassassin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-16.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"evolution-bogofilter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-16.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"evolution-data-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-15.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"evolution-data-server-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-15.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"evolution-data-server-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-15.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"evolution-data-server-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-15.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"evolution-data-server-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-15.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"evolution-data-server-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-15.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"evolution-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-16.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"evolution-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-16.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"evolution-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-16.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"evolution-pst-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-16.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"evolution-spamassassin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-16.el8"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"evolution","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-16.el8"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"evolution-data-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-15.el8"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"evolution-ews","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-10.el8"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"evolution-data-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20.6-17.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"evolution-data-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22.7-18.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"evolution-data-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22.7-18.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP2","package":"evolution-data-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.34.4-3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP2","package":"evolution-ews","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.34.4-3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"evolution-data-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.16.5-1ubuntu3","3.18.1-1ubuntu1","3.18.2-0ubuntu1","3.18.2-0ubuntu2","3.18.3-1ubuntu1","3.18.3-1ubuntu2","3.18.4-0ubuntu1","3.18.5-1ubuntu1","3.18.5-1ubuntu1.1","3.18.5-1ubuntu1.2","3.18.5-1ubuntu1.3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"evolution-data-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.26.1-1ubuntu1","3.26.2-1ubuntu1","3.26.2.1-1ubuntu1","3.26.2.1-1ubuntu3","3.26.3-1ubuntu1","3.26.5-1ubuntu3","3.27.90-1ubuntu1","3.28.0-1ubuntu1","3.28.0-2ubuntu1","3.28.0-2ubuntu2","3.28.1-1ubuntu1","3.28.3-0ubuntu0.18.04.1","3.28.5-0ubuntu0.18.04.1","3.28.5-0ubuntu0.18.04.2","3.28.5-0ubuntu0.18.04.3","3.28.5-0ubuntu0.18.04.3+esm1"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"evolution-data-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.34.4-lp152.2.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"evolution-ews","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.34.4-lp152.2.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"evolution-data-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.40.4-1.4"}]}],"bundled":3}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"gnome","product":"evolution-data-server"}],"references":[{"url":"https://gitlab.gnome.org/GNOME/evolution-data-server/-/issues/189","tags":["x_refsource_MISC","x_transferred","Exploit","Vendor Advisory","evidence","report"]},{"url":"https://gitlab.gnome.org/GNOME/evolution-data-server/-/commit/2cc39592b532cf0dc994fd3694b8e6bf924c9ab5","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory","fix","report"]},{"url":"https://gitlab.gnome.org/GNOME/evolution-data-server/-/commit/627c3cdbfd077e59aa288c85ff8272950577f1d7","tags":["x_refsource_MISC","x_transferred","Release Notes","Vendor Advisory","advisory","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/08/msg00005.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-16117","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-j89v-2w65-5qmq"},{"url":"https://vulners.com/cve/CVE-2020-16117","tags":["report"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-16117","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2020-0351.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=26962","tags":["report"]},{"url":"https://lists.debian.org/debian-security-announce/2020/msg00131.html","tags":["web"]},{"url":"https://www.debian.org/security/2020/dsa-4725","tags":["web"]},{"url":"https://www.debian.org/lts/security/2020/dla-2281","tags":["web"]},{"url":"https://www.debian.org/lts/security/2020/dla-2309","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1628","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:1752","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.4_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1862125","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1883619","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1885229","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1886026","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1902630","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1752.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-16117","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-16117","tags":["advisory","report"]},{"url":"https://errata.rockylinux.org/RLSA-2021:1752","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210885-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1173910","tags":["report"]},{"url":"https://bugzilla.suse.com/1174712","tags":["report"]},{"url":"https://bugzilla.suse.com/1182882","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14928","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-16117","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210891-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210949-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-16117","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/I3CUVYOHJVMCTZXIKRZXRNXLROM7HCFQ/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3257","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2020-16117","description":"In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid (e.g., minimal) CAPABILITY line on a connection attempt. This is related to imapx_free_capability and imapx_connect_to_server.","status":"published","published":"2020-07-29T17:59:10Z","modified":"2024-08-04T13:37:53.458Z","updated_at":"2026-11-02T14:35:59.116379Z"}],"euvd":[{"id":"EUVD-2020-8083","description":"In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid (e.g., minimal) CAPABILITY line on a connection attempt. This is related to imapx_free_capability and imapx_connect_to_server.","status":"published","published":"2020-07-29T17:59:10Z","modified":"2024-08-04T13:37:53Z","updated_at":"2026-11-03T03:07:29.271552Z"}],"ghsa":[{"id":"GHSA-j89v-2w65-5qmq","title":"In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with...","description":"In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid (e.g., minimal) CAPABILITY line on a connection attempt. This is related to imapx_free_capability and imapx_connect_to_server.","status":"published","published":"2022-05-24T17:24:38Z","modified":"2023-01-29T05:04:00Z","updated_at":"2026-11-02T14:45:27.054092Z"}],"nvd":[{"id":"CVE-2020-16117","description":"In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid (e.g., minimal) CAPABILITY line on a connection attempt. This is related to imapx_free_capability and imapx_connect_to_server.","status":"published","published":"2020-07-29T18:15:14.86Z","modified":"2026-06-17T02:57:44.113Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:06:10.994748Z"}],"osv":[{"id":"CVE-2020-16117","description":"In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid (e.g., minimal) CAPABILITY line on a connection attempt. This is related to imapx_free_capability and imapx_connect_to_server.","status":"published","published":"2020-07-29T18:15:14.86Z","modified":"2026-10-20T13:52:00.898660135Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:14.828228Z"},{"id":"DEBIAN-CVE-2020-16117","description":"In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid (e.g., minimal) CAPABILITY line on a connection attempt. This is related to imapx_free_capability and imapx_connect_to_server.","status":"published","published":"2020-07-29T18:15:14.86Z","modified":"2026-10-26T12:02:27.990132417Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:33.384087Z"},{"id":"OESA-2022-1628","title":"evolution-data-server security update","description":"The evolution-data-server package provides a personal information management application that provides integrated mail, calendaring and address book functionality. The evolution-data-server package provides a single database for common, desktop-wide information, such as a user's address book or calendar events.\r\n\r\nSecurity Fix(es):\r\n\r\nIn GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid (e.g., minimal) CAPABILITY line on a connection attempt. This is related to imapx_free_capability and imapx_connect_to_server.(CVE-2020-16117)","status":"published","published":"2022-05-11T11:04:54Z","modified":"2026-08-18T01:16:00.211075433Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"RHSA-2021:1752","title":"Red Hat Security Advisory: evolution security, bug fix, and enhancement update","status":"published","published":"2024-09-16T04:51:38Z","modified":"2026-06-27T10:13:29Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RLSA-2021:1752","title":"Low: evolution security, bug fix, and enhancement update","description":"Evolution is a GNOME application that provides integrated email, calendar, contact management, and communications functionality.\n\nThe evolution-data-server packages provide a unified back end for applications which interact with contacts, tasks and calendar information. Evolution Data Server was originally developed as a back end for the Evolution information management application, but is now used by various other applications.\n\nSecurity Fix(es):\n\n* evolution-data-server: NULL pointer dereference related to imapx_free_capability and imapx_connect_to_server (CVE-2020-16117)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.4 Release Notes linked from the References section.","status":"published","published":"2021-05-18T06:00:34Z","modified":"2026-02-04T17:45:04.440359Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2020-16117","description":"In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid (e.g., minimal) CAPABILITY line on a connection attempt. This is related to imapx_free_capability and imapx_connect_to_server.","status":"published","published":"2020-07-29T18:15:00Z","modified":"2026-06-01T15:45:10.593496975Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:23.344108Z"},{"id":"ALSA-2021:1752","title":"Low: evolution security, bug fix, and enhancement update","description":"Evolution is a GNOME application that provides integrated email, calendar, contact management, and communications functionality.\n\nThe evolution-data-server packages provide a unified back end for applications which interact with contacts, tasks and calendar information. Evolution Data Server was originally developed as a back end for the Evolution information management application, but is now used by various other applications.\n\nSecurity Fix(es):\n\n* evolution-data-server: NULL pointer dereference related to imapx_free_capability and imapx_connect_to_server (CVE-2020-16117)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2021-05-18T06:00:34Z","modified":"2026-10-29T11:00:32.545084684Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"DLA-2309-1","title":"evolution-data-server - security update","status":"published","published":"2020-08-02T00:00:00Z","modified":"2026-03-09T01:20:28.049704Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"MGASA-2020-0351","title":"Updated evolution-data-server packages fix security vulnerabilities","description":"evolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue\nthat affects SMTP and POP3. When a server sends a \"begin TLS\" response,\neds reads additional data and evaluates it in a TLS context, aka\n\"response injection\". (CVE-2020-14928)\n\nIn GNOME evolution-data-server before 3.35.91, a malicious server can crash\nthe mail client with a NULL pointer dereference by sending an invalid\n(e.g., minimal) CAPABILITY line on a connection attempt.\nThis is related to imapx_free_capability and imapx_connect_to_server.\n(CVE-2020-16117)\n","status":"published","published":"2020-08-28T14:46:59Z","modified":"2026-04-16T04:43:48.272910804Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2021:0482-1","title":"Security update for evolution-data-server","description":"This update for evolution-data-server fixes the following issues:\n\n- CVE-2020-16117: Fix crash on malformed server response with minimal capabilities (bsc#1174712).\n- CVE-2020-14928: Response injection via STARTTLS in SMTP and POP3 (bsc#1173910).\n- Fix buffer overrun when parsing base64 data (bsc#1182882).\n\nThis update for evolution-ews fixes the following issue:\n\n- Fix buffer overrun when parsing base64 data (bsc#1182882).\n\nThis update was imported from the SUSE:SLE-15-SP2:Update update project.","status":"published","published":"2021-03-27T19:04:57Z","modified":"2026-02-04T03:31:20.193266Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"openSUSE-SU-2024:10744-1","title":"evolution-data-server-3.40.4-1.4 on GA media","description":"These are all security issues fixed in the evolution-data-server-3.40.4-1.4 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:04:24.651834Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2021:0885-1","title":"Security update for evolution-data-server","description":"This update for evolution-data-server fixes the following issues:\n\n- Fix buffer overrun when parsing base64 data (bsc#1182882).\n- CVE-2020-16117: Fix crash on malformed server response with minimal capabilities (bsc#1174712).\n- CVE-2020-14928: Response injection via STARTTLS in SMTP and POP3 (bsc#1173910).\n","status":"published","published":"2021-03-19T14:48:30Z","modified":"2026-02-04T03:08:24.197133Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:0891-1","title":"Security update for evolution-data-server","description":"This update for evolution-data-server fixes the following issues:\n\n- Fix buffer overrun when parsing base64 data (bsc#1182882).\n- CVE-2020-16117: Fix crash on malformed server response with minimal capabilities (bsc#1174712).\n- CVE-2020-14928: Response injection via STARTTLS in SMTP and POP3 (bsc#1173910).\n","status":"published","published":"2021-03-19T14:52:37Z","modified":"2026-02-04T03:28:28.661297Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:0949-1","title":"Security update for evolution-data-server","description":"This update for evolution-data-server fixes the following issues:\n\n- CVE-2020-16117: Fix crash on malformed server response with minimal capabilities (bsc#1174712).\n- CVE-2020-14928: Response injection via STARTTLS in SMTP and POP3 (bsc#1173910).\n- Fix buffer overrun when parsing base64 data (bsc#1182882).\n\nThis update for evolution-ews fixes the following issue:\n\n- Fix buffer overrun when parsing base64 data (bsc#1182882).\n","status":"published","published":"2021-03-24T13:32:06Z","modified":"2026-02-04T04:23:42.470075Z","updated_at":"2026-11-02T15:53:48.690034Z"}]}}