Login Request a demo
BA
Product
Balsa
by Gnome · last CVE Jul 29, 2020
3
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 1Medium 1Low 0
Severity
All severities3Critical0High1Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Balsa to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-16118
7.5
2%
Jul 29
In GNOME Balsa before 2.6.0, a malicious server operator or man in the middle can trigger a NULL pointer dereference and client crash by sending a PREAUTH response to…
Affected: before 2.6.0
CVE-2020-13645
6.5
2%
May 28
In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server's TLS certificate if the application fails to specify…
Affected: before 2.5.11; 2.6.0
CVE-2007-5007
–
4%
Dec 12
Stack-based buffer overflow in the ir_fetch_seq function in balsa before 2.3.20 might allow remote IMAP servers to execute arbitrary code via a long response to a FETCH command
Affected: 1.1.7; 1.2.4; 1.4; 1.4.3; 2.0.6; 2.0.10; +34 more
Showing 3