CVE List


Critical 7.5

In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid (e.g., minimal) CAPABILITY line on a connection attempt. This is related to imapx_free_capability and imapx_connect_to_server.

Published July 29, 2020.

Affected software

Gnome Evolution-data-server

Reference links

Sign Up for Alerts