CVE-2020-15917 PUBLISHED

common/session.c in Claws Mail before 3.17.6 has a protocol violation because suffix data after STARTTLS is mishandled.

EPSS 2.24% · 84.4th percentile

Risk Scores

EPSS Score
2.24%
84.4th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSclaws-mail0, 3.12.0-1ubuntu1, 3.12.0-1ubuntu2
Ubuntu:18.04:LTSclaws-mail0, 3.15.0-2build2, 3.15.1-1
Ubuntu:20.04:LTSclaws-mail0, 3.17.4-1, 3.17.4-1build1

Timeline

References

Open in Interactive Console →