Buffer Overflow in Evolution-Data-Server
Summary
CVE-2018-12422: addressbook/backends/ldap/e-book-backend-ldap.c in Evolution-Data-Server in GNOME Evolution through 3.29.2 might allow attackers to trigger a Buffer Overflow via a long query that is processed by the strcat function. Affects evolution-data-server across 4 version ranges.
< 3.28.5-1
< 9a6cf88b52585a22002c8f03c0e1c2f12545fb55
< 34bad6173
< 635bfea271f83d76d0bdb2b15189668a82602651
Fixed in 3.28.5-1 or 34bad6173, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Evolution-Data-Server is a component of GNOME Evolution, a personal information management application. It provides a backend for storing and retrieving address book data. The LDAP backend in Evolution-Data-Server allows users to connect to LDAP servers and access their address book information. However, a vulnerability has been discovered in the LDAP backend that could potentially lead to a buffer overflow.
Vulnerability Detail
The vulnerability, identified as CVE-2018-12422, exists in the e-book-backend-ldap.c file of Evolution-Data-Server. It arises due to improper handling of long queries processed by the strcat function. Attackers can exploit this vulnerability by sending a specially crafted query, triggering a buffer overflow. The maintainer of the software disputes this claim, stating that the code computes the required string length before allocating a sufficiently large buffer on the heap. However, the vulnerability has been confirmed and assigned a CVSS score of 9.8 (Critical). If successfully exploited, it could allow attackers to execute arbitrary code or crash the application, potentially leading to remote code execution or denial of service.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
sudo apt-get install --only-upgrade evolution-data-server-
< 3.28.5-13.28.5-1 -
< 34bad617334bad6173
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
No specific workaround has been provided for this vulnerability.
Conclusion
The buffer overflow vulnerability in the LDAP backend of Evolution-Data-Server poses a significant risk to the security and stability of the application. It is crucial for users to update to the latest version of the package to mitigate the risk of exploitation. For further assistance or support in addressing this vulnerability, please contact DevNack.com.
See every vulnerability recorded for evolution-data-server →
FAQ
Evolution-Data-Server is a component of GNOME Evolution, a personal information management application. It provides functionality for storing and retrieving address book data.
If successfully exploited, this vulnerability could allow attackers to execute arbitrary code or crash the application, potentially leading to remote code execution or denial of service.
Yes, updating the Evolution-Data-Server package to version 3.28.5-1 or later will address the buffer overflow issue.
No specific workaround has been provided for this vulnerability.
The CVSS score of this vulnerability is 9.8 (Critical).
Related vulnerabilities
Recent vulnerabilities recorded for evolution-data-server.
