CVE-2020-14928

evolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and POP3

published July 17, 2020

CVSS
—
EPSS
3%
Percentile
86.4
In the wild
Unconfirmed
What it is

evolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and POP3. When a server sends a "begin TLS" response, eds reads additional data and evaluates it in a TLS context, aka "response injection."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02808 · 86.4th percentile
Published
2020-07-17T15:30Z
EPSS history
Timeline
  • 17 JUL 15:30Z
    evolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and POP3
    cvelistv5