CVE-2020-14928

Name of the Vulnerable Software and Affected Versions: evolution-data-server versions through 3.36.3

Description: The issue is related to a STARTTLS buffering problem that impacts SMTP and POP3. When a server sends a "begin TLS" response, the software reads additional data and evaluates it in a TLS context, which can lead to "response injection." This could potentially allow a remote attacker to affect data integrity.

Recommendations: For evolution-data-server versions through 3.36.3, update to a version that addresses the STARTTLS buffering issue to prevent potential response injection attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.