Medium
Security advisory
In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid (e.g., minimal) CAPABILITY line on a connection attempt. This is related to imapx_free_capability and imapx_connect_to_server.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2020-16117
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 12:33 UTC · Revision 1
Source evidence
In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid (e.g., minimal) CAPABILITY line on a connection attempt. This is related to imapx_free_capability and imapx_connect_to_server.
osv:CVE-2020-16117
Complete source record
{
"id": "08bd447a44d09060f415ea0ae044d906fb6659a5e74447a1bc454751a1258449",
"url": "https://osv.dev/vulnerability/CVE-2020-16117",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2020-16117",
"summary": "In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid (e.g., minimal) CAPABILITY line on a connection attempt. This is related to imapx_free_capability and imapx_connect_to_server.",
"evidence": "osv:CVE-2020-16117",
"products": [],
"severity": "medium",
"structured": {
"id": "CVE-2020-16117",
"aliases": [
"CVE-2020-16117"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://gitlab.gnome.org/gnome/evolution-data-server",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "627c3cdbfd077e59aa288c85ff8272950577f1d7"
},
{
"fixed": "2cc39592b532cf0dc994fd3694b8e6bf924c9ab5"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:gnome:evolution-data-server:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "3.35.91"
}
],
"source": "CPE_RANGE"
},
{
"range": [
{
"fixed": "2cc39592b532cf0dc994fd3694b8e6bf924c9ab5"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "627c3cdbfd077e59aa288c85ff8272950577f1d7"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
}
],
"versions": [
"3.35.90",
"3.35.3",
"3.35.2",
"3.35.1",
"3.34.0",
"3.33.92",
"3.33.91",
"3.33.90",
"3.33.4",
"3.33.3",
"3.33.2",
"3.33.1",
"3.32.0",
"3.31.92",
"3.31.91",
"3.31.90",
"3.31.4",
"3.31.3",
"3.31.2",
"3.31.1",
"3.30.0",
"3.29.92",
"3.29.91",
"3.29.90",
"3.29.4",
"3.29.3",
"3.29.2",
"3.29.1",
"3.28.0",
"3.27.92",
"3.27.91",
"3.27.90",
"3.27.4",
"EVOLUTION_DATA_SERVER_3_27_3",
"EVOLUTION_DATA_SERVER_3_27_2",
"EVOLUTION_DATA_SERVER_3_27_1",
"EVOLUTION_DATA_SERVER_3_26_0",
"EVOLUTION_DATA_SERVER_3_25_92",
"EVOLUTION_DATA_SERVER_3_25_91",
"EVOLUTION_DATA_SERVER_3_25_90",
"EVOLUTION_DATA_SERVER_3_25_4",
"EVOLUTION_DATA_SERVER_3_25_3",
"EVOLUTION_DATA_SERVER_3_25_2",
"EVOLUTION_DATA_SERVER_3_25_1",
"EVOLUTION_DATA_SERVER_3_24_0",
"EVOLUTION_DATA_SERVER_3_23_92",
"EVOLUTION_DATA_SERVER_3_23_91",
"EVOLUTION_DATA_SERVER_3_23_90",
"EVOLUTION_DATA_SERVER_3_23_4",
"EVOLUTION_DATA_SERVER_3_23_3",
"EVOLUTION_DATA_SERVER_3_23_2",
"EVOLUTION_DATA_SERVER_3_23_1",
"EVOLUTION_DATA_SERVER_3_22_0",
"EVOLUTION_DATA_SERVER_3_21_92",
"EVOLUTION_DATA_SERVER_3_21_91",
"EVOLUTION_DATA_SERVER_3_21_90",
"EVOLUTION_DATA_SERVER_3_21_4",
"EVOLUTION_DATA_SERVER_3_21_3",
"EVOLUTION_DATA_SERVER_3_21_2",
"EVOLUTION_DATA_SERVER_3_21_1",
"EVOLUTION_DATA_SERVER_3_20_0",
"EVOLUTION_DATA_SERVER_3_19_92",
"EVOLUTION_DATA_SERVER_3_19_91",
"EVOLUTION_DATA_SERVER_3_19_90",
"EVOLUTION_DATA_SERVER_3_19_4",
"EVOLUTION_DATA_SERVER_3_19_3",
"EVOLUTION_DATA_SERVER_3_19_2",
"EVOLUTION_DATA_SERVER_3_19_1",
"EVOLUTION_DATA_SERVER_3_18_0",
"EVOLUTION_DATA_SERVER_3_17_92",
"EVOLUTION_DATA_SERVER_3_17_91",
"EVOLUTION_DATA_SERVER_3_17_90",
"EVOLUTION_DATA_SERVER_3_17_4",
"EVOLUTION_DATA_SERVER_3_17_3",
"EVOLUTION_DATA_SERVER_3_17_2",
"EVOLUTION_DATA_SERVER_3_17_1",
"EVOLUTION_DATA_SERVER_3_16_0",
"EVOLUTION_DATA_SERVER_3_15_92",
"EVOLUTION_DATA_SERVER_3_15_91",
"EVOLUTION_DATA_SERVER_3_13_90",
"EVOLUTION_DATA_SERVER_3_13_10",
"EVOLUTION_DATA_SERVER_3_13_9",
"EVOLUTION_DATA_SERVER_3_13_8",
"EVOLUTION_DATA_SERVER_3_13_7",
"EVOLUTION_DATA_SERVER_3_13_6",
"EVOLUTION_DATA_SERVER_3_13_5",
"EVOLUTION_DATA_SERVER_3_13_4",
"EVOLUTION_DATA_SERVER_3_13_3",
"EVOLUTION_DATA_SERVER_3_13_2",
"EVOLUTION_DATA_SERVER_3_13_1",
"EVOLUTION_DATA_SERVER_3_12_0",
"EVOLUTION_DATA_SERVER_3_11_92",
"EVOLUTION_DATA_SERVER_3_11_91",
"EVOLUTION_DATA_SERVER_3_11_90",
"EVOLUTION_DATA_SERVER_3_11_5",
"EVOLUTION_DATA_SERVER_3_11_4",
"EVOLUTION_DATA_SERVER_3_11_3",
"EVOLUTION_DATA_SERVER_3_11_2",
"EVOLUTION_DATA_SERVER_3_11_1",
"EVOLUTION_DATA_SERVER_3_10_0",
"EVOLUTION_DATA_SERVER_3_9_92",
"EVOLUTION_DATA_SERVER_3_9_91",
"EVOLUTION_DATA_SERVER_3_9_90",
"EVOLUTION_DATA_SERVER_3_9_5",
"EVOLUTION_DATA_SERVER_3_9_4",
"EVOLUTION_DATA_SERVER_3_9_3",
"EVOLUTION_DATA_SERVER_3_9_2",
"EVOLUTION_DATA_SERVER_3_9_1",
"EVOLUTION_DATA_SERVER_3_7_92",
"EVOLUTION_DATA_SERVER_3_7_90",
"EVOLUTION_DATA_SERVER_3_7_5",
"EVOLUTION_DATA_SERVER_3_7_4",
"EVOLUTION_DATA_SERVER_3_7_3",
"EVOLUTION_DATA_SERVER_3_7_2",
"EVOLUTION_DATA_SERVER_3_7_1",
"EVOLUTION_DATA_SERVER_3_5_92",
"EVOLUTION_DATA_SERVER_3_5_91",
"EVOLUTION_DATA_SERVER_3_5_90",
"EVOLUTION_DATA_SERVER_3_5_5_FIXED",
"EVOLUTION_DATA_SERVER_3_5_4",
"EVOLUTION_DATA_SERVER_3_5_3",
"EVOLUTION_DATA_SERVER_3_5_1",
"EVOLUTION_DATA_SERVER_3_4_0",
"EVOLUTION_DATA_SERVER_3_3_92",
"EVOLUTION_DATA_SERVER_3_3_91",
"EVOLUTION_DATA_SERVER_3_3_90",
"EVOLUTION_DATA_SERVER_3_3_5",
"EVOLUTION_DATA_SERVER_3_3_4",
"EVOLUTION_DATA_SERVER_3_3_3",
"EVOLUTION_DATA_SERVER_3_3_2",
"EVOLUTION_DATA_SERVER_3_3_1",
"EVOLUTION_DATA_SERVER_3_2_0",
"EVOLUTION_DATA_SERVER_3_1_92",
"EVOLUTION_DATA_SERVER_3_1_91",
"EVOLUTION_DATA_SERVER_3_1_90",
"EVOLUTION_DATA_SERVER_3_1_5",
"EVOLUTION_DATA_SERVER_3_1_4",
"EVOLUTION_DATA_SERVER_3_1_3_1",
"EVOLUTION_DATA_SERVER_3_1_3",
"EVOLUTION_DATA_SERVER_3_1_2",
"EVOLUTION_DATA_SERVER_2_91_92",
"EVOLUTION_DATA_SERVER_2_91_91",
"EVOLUTION_DATA_SERVER_2_91_90",
"EVOLUTION_DATA_SERVER_2_91_6",
"EVOLUTION_DATA_SERVER_2_91_5",
"EVOLUTION_DATA_SERVER_2_91_4",
"EVOLUTION_DATA_SERVER_2_91_3",
"EVOLUTION_DATA_SERVER_2_91_2",
"EVOLUTION_DATA_SERVER_2_91_1",
"EVOLUTION_DATA_SERVER_2_91_0",
"EVOLUTION_DATA_SERVER_2_31_92",
"EVOLUTION_DATA_SERVER_2_31_91",
"EVOLUTION_DATA_SERVER_2_31_90",
"EVOLUTION_DATA_SERVER_2_31_6",
"EVOLUTION_DATA_SERVER_2_31_5",
"EVOLUTION_DATA_SERVER_2_31_4",
"EVOLUTION_DATA_SERVER_2_31_3_1",
"EVOLUTION_2_31_3_1",
"EVOLUTION_DATA_SERVER_2_31_3",
"EVOLUTION_DATA_SERVER_2_31_2",
"EVOLUTION_DATA_SERVER_2_31_1",
"EVOLUTION_DATA_SERVER_2_29_92",
"EVOLUTION_DATA_SERVER_2_29_91",
"EVOLUTION_DATA_SERVER_2_29_90",
"EVOLUTION_DATA_SERVER_2_29_6",
"EVOLUTION_DATA_SERVER_2_29_5",
"EVOLUTION_DATA_SERVER_2_29_4",
"EVOLUTION_DATA_SERVER_2_29_3",
"EVOLUTION_DATA_SERVER_2_29_2",
"EVOLUTION_DATA_SERVER_2_29_1",
"EVOLUTION_DATA_SERVER_2_27_90",
"EVOLUTION_DATA_SERVER_2_27_5",
"EVOLUTION_DATA_SERVER_2_27_4",
"EVOLUTION_DATA_SERVER_2_27_3",
"EVOLUTION_DATA_SERVER_2_27_2",
"EVOLUTION_DATA_SERVER_2_26_0",
"EVOLUTION_DATA_SERVER_2_25_92",
"EVOLUTION_DATA_SERVER_2_25_90",
"EVOLUTION_DATA_SERVER_2_25_5",
"EVOLUTION_DATA_SERVER_2_25_4",
"EVOLUTION_DATA_SERVER_2_25_3",
"EVOLUTION_DATA_SERVER_2_25_2",
"EVOLUTION_DATA_SERVER_2_25_1",
"EVOLUTION_DATA_SERVER_2_23_91",
"EVOLUTION_DATA_SERVER_2_23_90",
"EVOLUTION_DATA_SERVER_2_23_6",
"EVOLUTION_DATA_SERVER_2_23_5",
"EVOLUTION_DATA_SERVER_2_23_4",
"EVOLUTION_DATA_SERVER_2_23_3",
"EVOLUTION_DATA_SERVER_2_23_2",
"EVOLUTION_DATA_SERVER_2_23_1",
"EVOLUTION_DATA_SERVER_2_22_0",
"EVOLUTION_DATA_SERVER_2_21_91",
"EVOLUTION_DATA_SERVER_2_21_90",
"EVOLUTION_DATA_SERVER_2_21_5",
"EVOLUTION_DATA_SERVER_2_21_4",
"EVOLUTION_DATA_SERVER_2_21_3",
"EVOLUTION_DATA_SERVER_2_21_2",
"EVOLUTION_DATA_SERVER_2_21_1",
"EVOLUTION_DATA_SERVER_1_11_92",
"EVOLUTION_DATA_SERVER_1_11_91",
"EVOLUTION_DATA_SERVER_1_11_90",
"EVOLUTION_DATA_SERVER_1_11_5",
"EVOLUTION_DATA_SERVER_1_11_4",
"EVOLUTION_DATA_SERVER_1_11_3",
"EVOLUTION_DATA_SERVER_1_9_3",
"EVOLUTION_DATA_SERVER_1_9_1",
"GNOME_2_16_BRANCHPOINT",
"EVOLUTION_DATA_SERVER_1_8_1",
"EVOLUTION_DATA_SERVER_1_8_0",
"EVOLUTION_DATA_SERVER_1_7_92",
"ECALCOMP_ABI_ANCHOR",
"EVOLUTION_DATA_SERVER_1_7_91",
"EVOLUTION_DATA_SERVER_1_7_90_1",
"EVOLUTION_DATA_SERVER_1_7_90",
"mmapped-camel-summary-branchpoint",
"EVOLUTION_DATA_SERVER_1_7_4",
"EVOLUTION_DATA_SERVER_1_7_3",
"EVOLUTION_DATA_SERVER_1_7_2",
"EVOLUTION_DATA_SERVER_1_7_1",
"EVOLUTION_DATA_SERVER_1_5_92",
"EVOLUTION_DATA_SERVER_1_5_91",
"EVOLUTION_DATA_SERVER_1_5_9_0",
"EVOLUTION_DATA_SERVER_1_5_5",
"EVOLUTION_DATA_SERVER_1_5_4",
"EVOLUTION_DATA_SERVER_1_5_3",
"EVOLUTION_DATA_SERVER_1_5_1",
"EVOLUTION_DATA_SERVER_1_3_8",
"EVOLUTION_DATA_SERVER_1_3_7",
"EVOLUTION_DATA_SERVER_1_3_6_1",
"EVOLUTION_DATA_SERVER_1_3_6",
"EVOLUTION_DATA_SERVER_1_3_5",
"EVOLUTION_DATA_SERVER_1_3_4",
"caldav-branchpoint",
"EVOLUTION_DATA_SERVER_1_3_3_1",
"EVOLUTION_DATA_SERVER_1_3_3",
"notzed-disksummary-branchpoint",
"EVOLUTION_DATA_SERVER_1_3_2",
"EVOLUTION_DATA_SERVER_1_3_1",
"eds-1-2-1-merge-start",
"gnome-2-10-base",
"EVOLUTION_DATA_SERVER_1_1_6",
"EVOLUTION_DATA_SERVER_1_1_5",
"EVOLUTION_2_1_5",
"EVOLUTION_DATA_SERVER_1_1_4",
"EVOLUTION_DATA_SERVER_1_1_3",
"EVOLUTION_DATA_SERVER_1_1_2",
"EVOLUTION_2_1_4",
"EVOLUTION_2_1_3_1",
"EVOLUTION_2_1_3",
"EVOLUTION_2_1_2",
"EVOLUTION_DATA_SERVER_1_1_1",
"EVOLUTION_2_1_1",
"EVOLUTION_2_1_0",
"EVOLUTION_DATA_SERVER_1_1_0",
"notzed-messageinfo-branchpoint",
"EVOLUTION_2_0_4",
"EVOLUTION_2_0_3",
"EVOLUTION_2_0_2",
"eds-1-0-1-merge-start",
"notzed-eplugin-2-merge",
"evolution-2-0-1-merge-start",
"gnome-2-8-base",
"EVOLUTION_DATA_SERVER_0_0_99",
"evolution-2-0-1-merge",
"EVOLUTION_2_0_0",
"EVOLUTION_1_5_94_1",
"EVOLUTION_1_5_94",
"EVOLUTION_DATA_SERVER_0_0_98",
"EVOLUTION_DATA_SERVER_0_0_97",
"EVOLUTION_1_5_93",
"EVOLUTION_1_5_92_2",
"EVOLUTION_1_5_92_1",
"EVOLUTION_1_5_92",
"EVOLUTION_DATA_SERVER_0_0_96",
"EVOLUTION_1_5_91",
"EDS_MODULES_BASE",
"EVOLUTION_1_5_90",
"EVOLUTION_DATA_SERVER_0_0_93",
"EVOLUTION_1_5_8",
"EVOLUTION_DATA_SERVER_0_0_91",
"EVOLUTION_1_5_6_1",
"EVOLUTION_1_5_6",
"EVOLUTION_DATA_SERVER_0_0_90",
"EVOLUTION_1_5_5",
"EVOLUTION_DATA_SERVER_0_0_7",
"EVOLUION_1_5_4",
"EVOLUTION_DATA_SERVER_0_0_6",
"EVOLUTION_1_5_3",
"EVOLUTION_1_5_2",
"EVOLUTION_DATA_SERVER_0_0_5",
"EVOLUTION_DATA_SERVER_0_0_4",
"EVOLUTION_1_5_1",
"EVOLUTION_DATA_SERVER_0_0_3",
"EVOLUTION_DATA_SERVER_0_0_2",
"EVOLUTION_1_5",
"DB_4_1_25_NC",
"before-eds-merge",
"V0_0_1",
"backend-split-branch-merge-start",
"new-ui-branch-merge-start",
"new-ui-branch-merge-end",
"BEFORE_NEW_UI_MERGE",
"spam-filtering-start",
"new-calendar-branch-start",
"new-calendar-branch-merge-end",
"new-calendar-branch-before-create-modify",
"EVOLUTION_1_4_4",
"EVOLUTION_1_4_3",
"EVOLUTION_1_4_2",
"EVOLUTION_1_4_1",
"EVOLUTION_1_4_0",
"EVOLUTION_1_3_92",
"EVOLUTION_1_3_91",
"EVOLUTION_1_3_3",
"EVOLUTION_1_3_2",
"EVOLUTION_1_2_3",
"EVOLUTION_1_3_1",
"toshok-libmimedir-base",
"EVOLUTION_1_2_0",
"EVOLUTION_1_1_90",
"EVOLUTION_1_1_1",
"EVOLUTION_1_0_8",
"EVOLUTION_1_0_7",
"EVOLUTION_0_99_2",
"EVOLUTION_0_99_0",
"EVOLUTION_0_16_100",
"EVOLUTION_0_16",
"EVOLUTION_0_15",
"EVOLUTION_0_14",
"EVOLUTION_0_13",
"EVOLUTION_0_12",
"GNOME_MEDIA_1_2_2",
"E_TREE_REWORK_BASE",
"LWE_2001_01",
"before-camel-mt",
"EVOLUTION_0_8",
"EVOLUTION_0_6",
"GNOME_PRINT_0_24",
"EVOLUTION_0_5",
"EVOLUTION_0_3",
"EVOLUTION_0_2",
"EVOLUTION_0_1",
"EVOLUTION_0_0",
"new-parser-anchor",
"INITIAL"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-16117.json",
"vanir_signatures": [
{
"id": "CVE-2020-16117-89a35be6",
"digest": {
"threshold": 0.9,
"line_hashes": [
"20043028137609293051763799761082055484",
"83182470343345176891103833719244876020",
"199483931179386216107266404643240371748",
"335237393370969502089703702461498312200"
]
},
"source": "https://gitlab.gnome.org/gnome/evolution-data-server@2cc39592b532cf0dc994fd3694b8e6bf924c9ab5",
"target": {
"file": "src/camel/providers/imapx/camel-imapx-server.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2020-16117-fc9ee133",
"digest": {
"length": 4704,
"function_hash": "162272372638673840553232421692664243259"
},
"source": "https://gitlab.gnome.org/gnome/evolution-data-server@2cc39592b532cf0dc994fd3694b8e6bf924c9ab5",
"target": {
"file": "src/camel/providers/imapx/camel-imapx-server.c",
"function": "imapx_connect_to_server"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
}
],
"vanir_signatures_modified": "2026-10-20T13:52:00Z"
}
}
],
"modified": "2026-10-20T13:52:00.898660135Z",
"provider": "osv",
"references": [
"https://gitlab.gnome.org/GNOME/evolution-data-server/-/commit/627c3cdbfd077e59aa288c85ff8272950577f1d7",
"https://lists.debian.org/debian-lts-announce/2020/08/msg00005.html",
"https://gitlab.gnome.org/GNOME/evolution-data-server/-/commit/2cc39592b532cf0dc994fd3694b8e6bf924c9ab5",
"https://gitlab.gnome.org/GNOME/evolution-data-server/-/issues/189"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"
],
"vendor_product": "debian:debian_linux",
"extracted_events": [
{
"range": [
{
"introduced": "9.0"
},
{
"last_affected": "9.0"
}
],
"source": "CPE_STRING"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2020-16117",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 388302,
"published_at": "2020-07-29T18:15:14.86+00:00"
}