CVE-2020-14928

概要

参考情報

• bugzilla.suse.com/show_bug.cgi · Issue Tracking
• gitlab.gnome.org/GNOME//evolution-data-server/commit/ba82be72cfd427b5d72ff21f929b3a6d8529c4df · Patch
• gitlab.gnome.org/GNOME/evolution-data-server/-/commit/f404f33fb01b23903c2bbb16791c7907e457fbac · Patch
• gitlab.gnome.org/GNOME/evolution-data-server/-/issues/226 · Exploit
• lists.debian.org/debian-lts-announce/2020/07/msg00012.html · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QMBEZWA22EAYAZQWUX4KPEBER726KSIG
• security-tracker.debian.org/tracker/DLA-2281-1 · Third Party Advisory
• security-tracker.debian.org/tracker/DSA-4725-1 · Third Party Advisory
• usn.ubuntu.com/4429-1 · Third Party Advisory
• debian.org/security/2020/dsa-4725

evolution-data-server のその他の脆弱性

• CVE-2020-16117中 5.9In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an in…
• CVE-2009-0582中 5.8The ntlm_challenge function in the NTLM SASL authentication mechanism in camel/camel-sasl-ntlm.c in Camel in Evolution Data Server (aka evol…