Vendor/product archive

gnome / balsa CVEs

Beta · best-effort

3 CVEs tagged to gnome / balsa — 0 Critical, 1 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to gnome vendor archive

CVE-2020-16118

Published Jul 29, 2020

In GNOME Balsa before 2.6.0, a malicious server operator or man in the middle can trigger a NULL pointer dereference and client crash by sending a PREAUTH response to imap_mbox_co…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2020-13645

Published May 28, 2020

In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server's TLS certificate if the application fails to specify…

CVSS 6.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2007-5007

Published Dec 12, 2007

Stack-based buffer overflow in the ir_fetch_seq function in balsa before 2.3.20 might allow remote IMAP servers to execute arbitrary code via a long response to a FETCH command.

CVSS 6.8 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1