Vulnerabilities > CVE-2020-16118 - NULL Pointer Dereference vulnerability in multiple products

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
network
low complexity
gnome
opensuse
CWE-476
NVD
Published: 2020-07-29
Updated: 2024-11-21

Summary

In GNOME Balsa before 2.6.0, a malicious server operator or man in the middle can trigger a NULL pointer dereference and client crash by sending a PREAUTH response to imap_mbox_connect in libbalsa/imap/imap-handle.c.

Vulnerable Configurations

Part Description Count
Application
Gnome
8
Application
Opensuse
1
OS
Opensuse
1

Common Weakness Enumeration (CWE)

References