High severity7.5NVD Advisory· Published Jul 29, 2020· Updated Jun 17, 2026
CVE-2020-16118
CVE-2020-16118
Description
In GNOME Balsa before 2.6.0, a malicious server operator or man in the middle can trigger a NULL pointer dereference and client crash by sending a PREAUTH response to imap_mbox_connect in libbalsa/imap/imap-handle.c.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
7cpe:2.3:a:gnome:balsa:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:gnome:balsa:*:*:*:*:*:*:*:*range: <2.6.0
- (no CPE)range: <2.6.0
- cpe:2.3:a:opensuse:backports_sle:15.0:sp1:*:*:*:*:*:*
- GNOME/Balsadescription
- osv-coords2 versionspkg:rpm/opensuse/balsa&distro=openSUSE%20Leap%2015.1pkg:rpm/suse/balsa&distro=SUSE%20Package%20Hub%2015%20SP1
< 2.5.5-lp151.3.3.1+ 1 more
- (no CPE)range: < 2.5.5-lp151.3.3.1
- (no CPE)range: < 2.5.5-bp151.4.3.1
Patches
Vulnerability mechanics
References
4- gitlab.gnome.org/GNOME/balsa/-/commit/4e245d758e1c826a01080d40c22ca8706f0339e5nvdPatchThird Party Advisory
- gitlab.gnome.org/GNOME/balsa/-/issues/23nvdExploitThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2020-08/msg00035.htmlnvdMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2020-08/msg00045.htmlnvdMailing ListThird Party Advisory
News mentions
0No linked articles in our index yet.