47
CVE-2020-14928
PoC —CVSS 3.1
5.9 medium
EPSS
3%p86
Published
()
Modified
Description
evolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and POP3. When a server sends a "begin TLS" response, eds reads additional data and evaluates it in a TLS context, aka "response injection."
- Vendors
- gnomedebianfedoraprojectcanonical
- Products
- evolution-data-server, debian linux, fedora, ubuntu linux
- Weakness
- CWE-74
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N