CVE-2020-16117

In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid (e.g.…

published July 29, 2020

CVSS
—
EPSS
2%
Percentile
81.7
In the wild
Unconfirmed
What it is

In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid (e.g., minimal) CAPABILITY line on a connection attempt. This is related to imapx_free_capability and imapx_connect_to_server.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02123 · 81.7th percentile
Published
2020-07-29T17:59Z
EPSS history
Timeline
  • 29 JUL 17:59Z
    In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid (e.g.…
    cvelistv5