CVE-2021-28994 in Groupware Core

Sumário

de MITRE • 01/04/2021

kopano-ical (formerly zarafa-ical) in Kopano Groupware Core through 8.7.16, 9.x through 9.1.0, 10.x through 10.0.7, and 11.x through 11.0.1 and Zarafa 6.30.x through 7.2.x allows memory exhaustion via long HTTP headers.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservar: 22/03/2021
• Divulgação: 01/04/2021
• Moderação: aceite
• Entrada: VDB-172060
• CPE: pronto
• CWE: CWE-789 (confirmado)
• CVSS: 3.5 (VulDB)
• EPSS: 0.02049
• KEV: não
• Atividades: muito baixo
• Sector: Police, Hostingprovider, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2021-28994
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-28994
• CVE Details: https://www.cvedetails.com/cve/CVE-2021-28994/