CVE-2021-28994 in Groupware Core

Riassunto

di MITRE • 01/04/2021

kopano-ical (formerly zarafa-ical) in Kopano Groupware Core through 8.7.16, 9.x through 9.1.0, 10.x through 10.0.7, and 11.x through 11.0.1 and Zarafa 6.30.x through 7.2.x allows memory exhaustion via long HTTP headers.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Prenotare: 22/03/2021
• Divulgazione: 01/04/2021
• Moderazione: accettato
• Voce: VDB-172060
• CPE: pronto
• CWE: CWE-789 (confermato)
• CVSS: 3.5 (VulDB)
• EPSS: 0.02049
• KEV: no
• Attività: molto basso
• Settore: Homeoffice, Industry, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2021-28994
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-28994
• CVE Details: https://www.cvedetails.com/cve/CVE-2021-28994/