Denial Of Service (DoS)

2020-04-1000:31:25

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.003 Low

EPSS

Percentile

66.5%

JSON

evolution is vulnerable to denial of service. It was discovered that Evolution Data Server did not properly validate NTLM (NT LAN Manager) authentication challenge packets. A malicious server using NTLM authentication could cause an application using Evolution Data Server to disclose portions of its memory or crash during user authentication.

CPENameOperatorVersion
evolution28-evolution-data-servereq1.8.0__34.el4
evolution-data-servereq1.8.0__15.el5
evolution-data-servereq1.12.3__6.el5
evolution-data-servereq1.8.0__15.0.2.el5
evolution-data-servereq1.8.0__15.0.4.el5
evolution-data-servereq1.0.2__9.rhel4.1
evolution-data-servereq1.8.0__25.el5
evolution-data-servereq1.8.0__15.0.3.el5
evolution-data-servereq1.12.3__6.el5_2.3
evolution-data-servereq1.0.2__13.el4

Name	Operator	Version
evolution28-evolution-data-server	eq	1.8.0__34.el4
evolution-data-server	eq	1.8.0__15.el5
evolution-data-server	eq	1.12.3__6.el5
evolution-data-server	eq	1.8.0__15.0.2.el5
evolution-data-server	eq	1.8.0__15.0.4.el5
evolution-data-server	eq	1.0.2__9.rhel4.1
evolution-data-server	eq	1.8.0__25.el5
evolution-data-server	eq	1.8.0__15.0.3.el5
evolution-data-server	eq	1.12.3__6.el5_2.3
evolution-data-server	eq	1.0.2__13.el4