CVE-2021-28994

HIGH

Kopano Groupware Core <8.7.16, 9.x-9.1.0, 10.x-10.0.7, 11.x-11.0.1 & Zarafa 6.30.x-7.2.x - Memory Exhaustion

Title source: llm

Description

kopano-ical (formerly zarafa-ical) in Kopano Groupware Core through 8.7.16, 9.x through 9.1.0, 10.x through 10.0.7, and 11.x through 11.0.1 and Zarafa 6.30.x through 7.2.x allows memory exhaustion via long HTTP headers.

References (3)

Core 3

Core References

Exploit, Mailing List, Third Party Advisory x_refsource_misc

https://www.openwall.com/lists/oss-security/2021/03/19/6

Mailing List, Third Party Advisory mailing-list x_refsource_mlist

http://www.openwall.com/lists/oss-security/2021/04/01/1

Mailing List, Third Party Advisory mailing-list x_refsource_mlist

http://www.openwall.com/lists/oss-security/2021/04/25/1

Scores

CVSS v3 7.5

EPSS 0.0205

EPSS Percentile 78.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-770

Status published

Products (2)

kopano/groupware_core < 8.7.16

zarafa/zarafa 6.30.0 - 7.2.6

Published Mar 31, 2021

Tracked Since Feb 18, 2026