Improper Neutralization of Special Elements in Output Used by a Downstream Component in Debian Linux - CVE-2020-14928

Vulnerability identifier: #VU34139

CSH Severity: Medium

CVSS v4: 8.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-14928

CWE-ID: CWE-74

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote non-authenticated attacker to manipulate data.

evolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and POP3. When a server sends a "begin TLS" response, eds reads additional data and evaluates it in a TLS context, aka "response injection."

Debian Linux
Red Hat Enterprise Linux for IBM z Systems
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for x86_64
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for x86_64
SUSE Linux Enterprise Workstation Extension
SUSE Linux Enterprise Software Development Kit
Ubuntu
openEuler
Fedora
openchange (Red Hat package)
evolution (Red Hat package)
evolution-data-server (Red Hat package)
bogofilter (Red Hat package)
evolution-data-server-common (Ubuntu package)
libedataserver-1.2-21 (Ubuntu package)
libcamel-1.2-54 (Ubuntu package)
libebackend-1.2-10 (Ubuntu package)
evolution-data-server (Ubuntu package)
libcamel-1_2-57
libcamel-1_2-57-debuginfo
libedataserver-1_2-21
libedataserver-1_2-21-debuginfo
libedata-cal-1_2-28-debuginfo-32bit
libedata-cal-1_2-28-debuginfo
libedata-cal-1_2-28-32bit
libedata-cal-1_2-28
libedata-book-1_2-25-debuginfo-32bit
libedata-book-1_2-25-debuginfo
libedata-book-1_2-25-32bit
libedata-book-1_2-25
libecal-1_2-19-debuginfo-32bit
libecal-1_2-19
libecal-1_2-19-debuginfo
libedataserver-1_2-22
libedataserver-1_2-22-32bit
libedataserver-1_2-22-debuginfo
libedataserver-1_2-22-debuginfo-32bit
libedataserverui-1_2-1
libedataserverui-1_2-1-debuginfo
evolution-data-server-lang
evolution-data-server-devel
typelib-1_0-EBook-1_2
typelib-1_0-EBookContacts-1_2
typelib-1_0-EDataServer-1_2
libecal-1_2-19-32bit
evolution-data-server
evolution-data-server-32bit
evolution-data-server-debuginfo
evolution-data-server-debuginfo-32bit
evolution-data-server-debugsource
libcamel-1_2-59
libcamel-1_2-59-32bit
libcamel-1_2-59-debuginfo
libcamel-1_2-59-debuginfo-32bit
libebackend-1_2-10
libebackend-1_2-10-32bit
libebackend-1_2-10-debuginfo
libebackend-1_2-10-debuginfo-32bit
libebook-1_2-16
libebook-1_2-16-32bit
libebook-1_2-16-debuginfo
libebook-1_2-16-debuginfo-32bit
libebook-contacts-1_2-2
libebook-contacts-1_2-2-32bit
libebook-contacts-1_2-2-debuginfo
libebook-contacts-1_2-2-debuginfo-32bit
evolution-mapi (Red Hat package)
libcamel-1.2-61 (Ubuntu package)
libedataserver-1.2-23 (Ubuntu package)
evolution-data-server-doc
evolution-data-server-langpacks
evolution-data-server-perl
evolution-data-server (Debian package)
libcamel-1_2-62
libecal-2_0-1
libebook-contacts-1_2-3-debuginfo
libedata-book-1_2-26-debuginfo
libebook-1_2-20-debuginfo
libebook-1_2-20
libcamel-1_2-62-debuginfo
libebook-contacts-1_2-3
evolution-ews-debugsource
evolution-ews-debuginfo
evolution-ews
libedata-cal-2_0-1
libedata-cal-2_0-1-debuginfo
libedataserver-1_2-24
libedataserver-1_2-24-debuginfo
libedataserverui-1_2-2
libedataserverui-1_2-2-debuginfo
typelib-1_0-Camel-1_2
libecal-2_0-1-debuginfo
typelib-1_0-ECal-2_0
typelib-1_0-EDataServerUI-1_2
evolution-ews-lang
libedata-book-1_2-26
libcamel-1.2-62 (Ubuntu package)
libedataserver-1.2-24 (Ubuntu package)

Install update from vendor's website.

openchange (Red Hat package) - update to 2.3-26.el8
evolution (Red Hat package) - update to 3.28.5-14.el8
evolution-data-server (Red Hat package) - update to 3.28.5-14.el8
bogofilter (Red Hat package) - update to 1.2.5-2.el8
evolution-data-server-common (Ubuntu package) - addressed in versions 3.18.5-1ubuntu1.3, 3.28.5-0ubuntu0.18.04.3, 3.36.3-0ubuntu1.1
libedataserver-1.2-21 (Ubuntu package) - update to 3.18.5-1ubuntu1.3
libcamel-1.2-54 (Ubuntu package) - update to 3.18.5-1ubuntu1.3
libebackend-1.2-10 (Ubuntu package) - addressed in versions 3.18.5-1ubuntu1.3, 3.28.5-0ubuntu0.18.04.3, 3.36.3-0ubuntu1.1
evolution-data-server (Ubuntu package) - addressed in versions 3.18.5-1ubuntu1.3, 3.28.5-0ubuntu0.18.04.3, 3.36.3-0ubuntu1.1
libcamel-1_2-57 - update to 3.20.6-17.3.1
libcamel-1_2-57-debuginfo - update to 3.20.6-17.3.1
libedataserver-1_2-21 - update to 3.20.6-17.3.1
libedataserver-1_2-21-debuginfo - update to 3.20.6-17.3.1
libedata-cal-1_2-28-debuginfo-32bit - update to 3.22.7-18.7.1
libedata-cal-1_2-28-debuginfo - update to 3.22.7-18.7.1
libedata-cal-1_2-28-32bit - update to 3.22.7-18.7.1
libedata-cal-1_2-28 - update to 3.22.7-18.7.1
libedata-book-1_2-25-debuginfo-32bit - update to 3.22.7-18.7.1
libedata-book-1_2-25-debuginfo - update to 3.22.7-18.7.1
libedata-book-1_2-25-32bit - update to 3.22.7-18.7.1
libedata-book-1_2-25 - update to 3.22.7-18.7.1
libecal-1_2-19-debuginfo-32bit - update to 3.22.7-18.7.1
libecal-1_2-19 - update to 3.22.7-18.7.1
libecal-1_2-19-debuginfo - update to 3.22.7-18.7.1
libedataserver-1_2-22 - update to 3.22.7-18.7.1
libedataserver-1_2-22-32bit - update to 3.22.7-18.7.1
libedataserver-1_2-22-debuginfo - update to 3.22.7-18.7.1
libedataserver-1_2-22-debuginfo-32bit - update to 3.22.7-18.7.1
libedataserverui-1_2-1 - update to 3.22.7-18.7.1
libedataserverui-1_2-1-debuginfo - update to 3.22.7-18.7.1
evolution-data-server-lang - addressed in versions 3.22.7-18.7.1, 3.34.4-3.3.1
evolution-data-server-devel - addressed in versions 3.22.7-18.7.1, 3.34.4-3.3.1
typelib-1_0-EBook-1_2 - addressed in versions 3.22.7-18.7.1, 3.34.4-3.3.1
typelib-1_0-EBookContacts-1_2 - addressed in versions 3.22.7-18.7.1, 3.34.4-3.3.1
typelib-1_0-EDataServer-1_2 - addressed in versions 3.22.7-18.7.1, 3.34.4-3.3.1
libecal-1_2-19-32bit - update to 3.22.7-18.7.1
evolution-data-server - addressed in versions 3.22.7-18.7.1, 3.34.4-3.3.1
evolution-data-server-32bit - update to 3.22.7-18.7.1
evolution-data-server-debuginfo - addressed in versions 3.22.7-18.7.1, 3.34.4-3.3.1
evolution-data-server-debuginfo-32bit - update to 3.22.7-18.7.1
evolution-data-server-debugsource - addressed in versions 3.22.7-18.7.1, 3.34.4-3.3.1
libcamel-1_2-59 - update to 3.22.7-18.7.1
libcamel-1_2-59-32bit - update to 3.22.7-18.7.1
libcamel-1_2-59-debuginfo - update to 3.22.7-18.7.1
libcamel-1_2-59-debuginfo-32bit - update to 3.22.7-18.7.1
libebackend-1_2-10 - addressed in versions 3.22.7-18.7.1, 3.34.4-3.3.1
libebackend-1_2-10-32bit - update to 3.22.7-18.7.1
libebackend-1_2-10-debuginfo - addressed in versions 3.22.7-18.7.1, 3.34.4-3.3.1
libebackend-1_2-10-debuginfo-32bit - update to 3.22.7-18.7.1
libebook-1_2-16 - update to 3.22.7-18.7.1
libebook-1_2-16-32bit - update to 3.22.7-18.7.1
libebook-1_2-16-debuginfo - update to 3.22.7-18.7.1
libebook-1_2-16-debuginfo-32bit - update to 3.22.7-18.7.1
libebook-contacts-1_2-2 - update to 3.22.7-18.7.1
libebook-contacts-1_2-2-32bit - update to 3.22.7-18.7.1
libebook-contacts-1_2-2-debuginfo - update to 3.22.7-18.7.1
libebook-contacts-1_2-2-debuginfo-32bit - update to 3.22.7-18.7.1
evolution-mapi (Red Hat package) - update to 3.28.3-3.el8
libcamel-1.2-61 (Ubuntu package) - update to 3.28.5-0ubuntu0.18.04.3
libedataserver-1.2-23 (Ubuntu package) - update to 3.28.5-0ubuntu0.18.04.3
evolution-data-server-doc - update to 3.30.1-5
evolution-data-server-langpacks - update to 3.30.1-5
evolution-data-server-debugsource - update to 3.30.1-5
evolution-data-server-perl - update to 3.30.1-5
evolution-data-server-devel - update to 3.30.1-5
evolution-data-server-debuginfo - update to 3.30.1-5
evolution-data-server - update to 3.30.1-5
evolution-data-server (Debian package) - update to 3.30.5-1+deb10u1
evolution-data-server - update to 3.34.4-2.fc31
libcamel-1_2-62 - update to 3.34.4-3.3.1
libecal-2_0-1 - update to 3.34.4-3.3.1
libebook-contacts-1_2-3-debuginfo - update to 3.34.4-3.3.1
libedata-book-1_2-26-debuginfo - update to 3.34.4-3.3.1
libebook-1_2-20-debuginfo - update to 3.34.4-3.3.1
libebook-1_2-20 - update to 3.34.4-3.3.1
libcamel-1_2-62-debuginfo - update to 3.34.4-3.3.1
libebook-contacts-1_2-3 - update to 3.34.4-3.3.1
evolution-ews-debugsource - update to 3.34.4-3.3.1
evolution-ews-debuginfo - update to 3.34.4-3.3.1
evolution-ews - update to 3.34.4-3.3.1
libedata-cal-2_0-1 - update to 3.34.4-3.3.1
libedata-cal-2_0-1-debuginfo - update to 3.34.4-3.3.1
libedataserver-1_2-24 - update to 3.34.4-3.3.1
libedataserver-1_2-24-debuginfo - update to 3.34.4-3.3.1
libedataserverui-1_2-2 - update to 3.34.4-3.3.1
libedataserverui-1_2-2-debuginfo - update to 3.34.4-3.3.1
typelib-1_0-Camel-1_2 - update to 3.34.4-3.3.1
libecal-2_0-1-debuginfo - update to 3.34.4-3.3.1
typelib-1_0-ECal-2_0 - update to 3.34.4-3.3.1
typelib-1_0-EDataServerUI-1_2 - update to 3.34.4-3.3.1
evolution-ews-lang - update to 3.34.4-3.3.1
libedata-book-1_2-26 - update to 3.34.4-3.3.1
libcamel-1.2-62 (Ubuntu package) - update to 3.36.3-0ubuntu1.1
libedataserver-1.2-24 (Ubuntu package) - update to 3.36.3-0ubuntu1.1

• https://bugzilla.suse.com/show_bug.cgi?id=1173910
• https://gitlab.gnome.org/GNOME//evolution-data-server/commit/ba82be72cfd427b5d72ff21f929b3a6d8529c4df
• https://gitlab.gnome.org/GNOME/evolution-data-server/-/commit/f404f33fb01b23903c2bbb16791c7907e457fbac
• https://gitlab.gnome.org/GNOME/evolution-data-server/-/issues/226
• https://lists.debian.org/debian-lts-announce/2020/07/msg00012.html
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QMBEZWA22EAYAZQWUX4KPEBER726KSIG/
• https://security-tracker.debian.org/tracker/DLA-2281-1
• https://security-tracker.debian.org/tracker/DSA-4725-1
• https://usn.ubuntu.com/4429-1/
• https://www.debian.org/security/2020/dsa-4725

• Improper Neutralization of Special Elements in Output Used by a Downstream Component in Debian Linux
• Red Hat update for evolution
• Debian update for evolution-data-server
• SUSE update for evolution-data-server
• SUSE update for evolution-data-server
• SUSE update for evolution-data-server
• openEuler update for evolution-data-server
• Ubuntu update for evolution-data-server
• Fedora 31 update for evolution-data-server