Critical NULL Pointer Dereference Vulnerability in Evolution Data Server
Summary
CVE-2020-16117: In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid (e.g., minimal) CAPABILITY line on a connection attempt. Affects evolution-data-server across 3 version ranges.
< 2cc39592b532cf0dc994fd3694b8e6bf924c9ab5
< 3.36.0-1
< 627c3cdbfd077e59aa288c85ff8272950577f1d7
Fixed in 3.36.0-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Evolution Data Server is a core component of the GNOME desktop environment, providing essential services for email, calendar, and contact management. It facilitates communication and scheduling by integrating various data sources. However, prior to version 3.36.0-1, it was susceptible to a vulnerability that could be exploited by malicious servers, leading to application crashes.
Vulnerability Detail
The vulnerability, identified as CVE-2020-16117, arises from a NULL pointer dereference in the Evolution Data Server when it encounters an invalid CAPABILITY line during a connection attempt. This flaw allows a malicious server to send crafted input that can crash the mail client, disrupting user access and potentially leading to data loss. The issue is linked to the functions imapx_free_capability and imapx_connect_to_server, which fail to handle unexpected input correctly.
How To Fix
Minimum fixed version
3.36.0-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade evolution-data-serverTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can avoid connecting to untrusted or unknown mail servers that may exploit this vulnerability until the upgrade is completed.
Conclusion
CVE-2020-16117 represents a significant risk for users of the Evolution Data Server prior to version 3.36.0-1. It is crucial for users to upgrade their software to mitigate the risk of crashes caused by malicious servers. Regular monitoring using tools like Vulert can help maintain security against such vulnerabilities.
See every vulnerability recorded for evolution-data-server →
FAQ
CVE-2020-16117 is a vulnerability in the Evolution Data Server that allows a malicious server to crash the mail client by sending an invalid CAPABILITY line.
If you are using a version prior to 3.36.0-1, your installation is vulnerable to this issue.
Exploitation of this vulnerability can lead to application crashes, disrupting email services and potentially causing data loss.
Yes, you can use Vulert to monitor and alert for open-source vulnerabilities in your software without requiring access to the code or installation.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
Related vulnerabilities
Recent vulnerabilities recorded for evolution-data-server.
