CVE-2019-19907 - HrAddFBBlock in libfreebusy/freebusyutil.cpp in Kopano Groupware Core before 8.7.7 allows out-of-bounds access, as demonstrated by mishandling of an array copy during parsing of ICal data

Back Back to CVE browser

CRITICAL

HrAddFBBlock in libfreebusy/freebusyutil.cpp in Kopano Groupware Core before 8.7.7 allows out-of-bounds access, as demonstrated by mishandling of an array copy during parsing of ICal data

Published Dec 19, 2019

9.8

CRITICAL

CVSS 3.1

EPSS 2.19%

Description

HrAddFBBlock in libfreebusy/freebusyutil.cpp in Kopano Groupware Core before 8.7.7 allows out-of-bounds access, as demonstrated by mishandling of an array copy during parsing of ICal data.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-120

Classic Buffer Overflow

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-9499
Advisory
https://lists.debian.org/debian-lts-announce/2023/03/msg00006.html
mailing-list
https://stash.kopano.io/projects/KC/repos/kopanocore/browse/RELNOTES.txt
Release Notes
https://stash.kopano.io/projects/KC/repos/kopanocore/commits/4e02b420fff
Patch

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-9499		Advisory
https://lists.debian.org/debian-lts-announce/2023/03/msg00006.html		mailing-list
https://stash.kopano.io/projects/KC/repos/kopanocore/browse/RELNOTES.txt		Release Notes
https://stash.kopano.io/projects/KC/repos/kopanocore/commits/4e02b420fff		Patch

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Dec 19, 2019

Updated Aug 5, 2024

Reserved Dec 19, 2019

Link CVE-2019-19907

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-19907

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Dec 19, 2019

Updated Aug 5, 2024

Link EUVD-2019-9499

GitHub

No data