| Package | Affected versions | Patched versions |
|---|---|---|
| evolution-data-server | < 3.35.91 | 3.35.91 |
In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid (e.g., minimal) CAPABILITY line on a connection attempt. This is related to imapx_free_capability and imapx_connect_to_server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free