CVE-2020-15953

LibEtPan through 1.9.4, as used in MailCore 2 through 0.6.3 and other products, has a STARTTLS buffering issue that affects IMAP, SMTP, and POP3

published July 27, 2020

CVSS
—
EPSS
2%
Percentile
83.9
In the wild
Unconfirmed
What it is

LibEtPan through 1.9.4, as used in MailCore 2 through 0.6.3 and other products, has a STARTTLS buffering issue that affects IMAP, SMTP, and POP3. When a server sends a "begin TLS" response, the client reads additional data (e.g., from a meddler-in-the-middle attacker) and evaluates it in a TLS context, aka "response injection."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02404 · 83.9th percentile
Published
2020-07-27T06:07Z
EPSS history
Timeline
  • 27 JUL 06:07Z
    LibEtPan through 1.9.4, as used in MailCore 2 through 0.6.3 and other products, has a STARTTLS buffering issue that affects IMAP, SMTP, and POP3
    cvelistv5