PT-2020-5785 · Gnome+8 · Evolution Data Server+8

Damian Poddebniak + 1 · Published 2020-07-04 · Updated 2024-06-15 · CVE-2020-14928

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions: evolution-data-server versions through 3.36.3

Description: The issue is related to a STARTTLS buffering problem that impacts SMTP and POP3. When a server sends a "begin TLS" response, the software reads additional data and evaluates it in a TLS context, which can lead to "response injection." This could potentially allow a remote attacker to affect data integrity.

Recommendations: For evolution-data-server versions through 3.36.3, update to a version that addresses the STARTTLS buffering issue to prevent potential response injection attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Special Elements Injection

Weakness Enumeration

CWE-74

Related Identifiers

ALSA-2020:4649

ALT-PU-2020-2306

BDU:2021-01745

CESA-2020_4649

CVE-2020-14928

DLA-2281-1

DSA-4725-1

MGASA-2020-0351

OESA-2022-1785

OPENSUSE-SU-2021:0482-1

OPENSUSE-SU-2021_0482-1

OPENSUSE-SU-2024:10744-1

RHSA-2020:4649

RHSA-2020_4649

RLSA-2020:4649

SUSE-SU-2021:0885-1

SUSE-SU-2021:0891-1

SUSE-SU-2021:0949-1

SUSE-SU-2021_0891-1

USN-4429-1

Affected Products

Alt Linux

Almalinux

Centos

Linuxmint

Red Hat

Rocky Linux

Suse

Ubuntu

Evolution Data Server

References · 58

• 🔥 https://gitlab.gnome.org/GNOME/evolution-data-server/-/issues/226 · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-14928 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4429-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-14928 · Vendor Advisory
• https://debian.org/lts/security/2020/dla-2309 · Vendor Advisory
• https://debian.org/security/2020/dsa-4725 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2022-1785 · Vendor Advisory
• https://debian.org/lts/security/2020/dla-2281 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2020-4649.html · Vendor Advisory
• https://gitlab.gnome.org/GNOME/evolution-data-server/-/commit/f404f33fb01b23903c2bbb16791c7907e457fbac · Patch
• https://security-tracker.debian.org/tracker/DSA-4725-1 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QMBEZWA22EAYAZQWUX4KPEBER726KSIG · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/QMBEZWA22EAYAZQWUX4KPEBER726KSIG · Vendor Advisory
• https://osv.dev/vulnerability/RLSA-2020:4649 · Vendor Advisory
• https://bugzilla.suse.com/show_bug.cgi?id=1173910 · Patch