UBUNTU-CVE-2019-3890

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/CVE-2019-3890
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2019/UBUNTU-CVE-2019-3890.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2019-3890
Related
Published
2019-08-01T14:15:00Z
Modified
2024-10-15T14:07:18Z
Severity
  • 8.1 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N CVSS Calculator
Summary
[none]
Details

It was discovered evolution-ews before 3.31.3 does not check the validity of SSL certificates. An attacker could abuse this flaw to get confidential information by tricking the user into connecting to a fake server without the user noticing the difference.

References

Affected packages

Ubuntu:Pro:16.04:LTS / evolution-ews

Package

Name
evolution-ews
Purl
pkg:deb/ubuntu/evolution-ews?arch=src?distro=esm-apps/xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

3.*

3.16.5-0ubuntu1
3.18.0-3
3.18.2-1
3.18.3-1
3.18.5-1
3.18.5-1ubuntu1

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:18.04:LTS / evolution-ews

Package

Name
evolution-ews
Purl
pkg:deb/ubuntu/evolution-ews?arch=src?distro=esm-apps/bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

3.*

3.26.1-1
3.26.2-1
3.26.2-1build1
3.26.3-1
3.26.3-2
3.27.90-0ubuntu1
3.28.0-1
3.28.1-1
3.28.5-0ubuntu0.18.04.1

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

Ubuntu:20.04:LTS / evolution-ews

Package

Name
evolution-ews
Purl
pkg:deb/ubuntu/evolution-ews?arch=src?distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

3.*

3.34.1-1
3.35.91-1
3.35.92-1
3.36.0-1
3.36.1-1
3.36.2-0ubuntu1
3.36.3-0ubuntu1
3.36.4-0ubuntu1
3.36.5-0ubuntu1
3.36.5-0ubuntu1.1

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

Ubuntu:22.04:LTS / evolution-ews

Package

Name
evolution-ews
Purl
pkg:deb/ubuntu/evolution-ews?arch=src?distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

3.*

3.40.4-1ubuntu1
3.42.0-2
3.42.1-1
3.42.3-1
3.43.2-1
3.43.3-1
3.44.0-1

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

Ubuntu:24.10 / evolution-ews

Package

Name
evolution-ews
Purl
pkg:deb/ubuntu/evolution-ews?arch=src?distro=oracular

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

3.*

3.52.0-1build1
3.52.1-1
3.52.1-2
3.52.2-1
3.52.3-1
3.53.2-1
3.53.3-1
3.54.0-1

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

Ubuntu:24.04:LTS / evolution-ews

Package

Name
evolution-ews
Purl
pkg:deb/ubuntu/evolution-ews?arch=src?distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

3.*

3.50.0-1
3.50.1-1
3.50.2-1
3.50.3-1
3.52.0-1
3.52.0-1build1

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}