PT-2019-15999 · Kopano+2 · Kopano Groupware Core+2

Published 2019-12-19 · Updated 2024-07-04 · CVE-2019-19907

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Kopano Groupware Core versions prior to 8.7.7

Description The issue is related to out-of-bounds access in the HrAddFBBlock function, specifically during the parsing of ICal data. This occurs due to the mishandling of an array copy in the libfreebusy/freebusyutil.cpp component.

Recommendations For versions prior to 8.7.7, update to version 8.7.7 or later to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2019-19907

DLA-3354-1

USN-6876-1

Affected Products

Kopano Groupware Core

Linuxmint

Ubuntu

References · 12

• https://ubuntu.com/security/CVE-2022-26562 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-19907 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2019-19907 · Security Note
• https://osv.dev/vulnerability/DLA-3354-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6876-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-19907 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6876-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-19907 · Vendor Advisory
• https://stash.kopano.io/projects/KC/repos/kopanocore/commits/4e02b420fff · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2019-19907 · Security Note
• https://lists.debian.org/debian-lts-announce/2023/03/msg00006.html · Note
• https://stash.kopano.io/projects/KC/repos/kopanocore/browse/RELNOTES.txt · Note