Lucene search
Veracode Vulnerability DatabaseVERACODE:30161HistoryApr 25, 2021 - 2:22 a.m.
Signature Verification Bypass
2021-04-2502:22:43
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
0.001 Low
EPSS
Percentile
24.2%
evolution is vulnerable to signature verification bypass. A “Valid signature” message is produced for an unknown identifier on a previously trusted key as the applcation does not retrieve enough information from the GnuPG API. NOTE: third parties dispute the significance of this issue, and dispute whether Evolution is the best place to change this behavior.
| CPE | Name | Operator | Version |
|---|---|---|---|
| evolution:3.13 | eq | 3.38.3-r0 |
Related
ubuntucve
ubuntucve
CVE-2021-3349
2021-02-01 00:00:00
nvd
nvd
CVE-2021-3349
2021-02-01 05:15:11
cve
cve
CVE-2021-3349
2021-02-01 05:15:11
redhatcve
redhatcve
CVE-2021-3349
2021-02-01 14:02:49
cvelist
cvelist
CVE-2021-3349
2021-02-01 04:04:19
nessus
nessus
RHEL 8 : evolution-data-server (Unpatched Vulnerability)
2024-06-03 00:00:00
RHEL 7 : evolution-data-server (Unpatched Vulnerability)
2024-05-11 00:00:00
RHEL 6 : evolution-data-server (Unpatched Vulnerability)
2024-05-11 00:00:00
alpinelinux
alpinelinux
CVE-2021-3349
2021-02-01 05:15:11
vulnrichment
vulnrichment
CVE-2021-3349
2021-02-01 04:04:19
prion
prion
Design/Logic Flaw
2021-02-01 05:15:00
debiancve
debiancve
CVE-2021-3349
2021-02-01 05:15:11