https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-08T20:18:50.417279+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2020-14928 CVE-2020-14928 2026-10-08T20:18:50.483308+00:00

evolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and POP3. When a server sends a "begin TLS" response, eds reads additional data and evaluates it in a TLS context, aka "response injection."

 https://vulnerability.circl.lu/vuln/usn-4429-1 USN-4429-1 — evolution-data-server vulnerability 2026-10-08T20:18:50.483422+00:00

Affected: Ubuntu:16.04:LTS: evolution-data-server, Ubuntu:18.04:LTS: evolution-data-server, Ubuntu:20.04:LTS: evolution-data-server

It was discovered that Evolution Data Server incorrectly handled STARTTLS when using SMTP and POP3. A remote attacker could possibly use this issue to perform a response injection attack.