Skip to main content

Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

© 2026 Mondoo, Inc.

Privacy Policy Terms of Service Imprint

Vulnerability Intelligence

CVE-2021-28994 | Mondoo Vulnerability Intelligence

Vulnerability IntelligenceCVE-2021-28994

CVE-2021-28994

HIGH7.5

kopano-ical (formerly zarafa-ical) in Kopano Groupware Core through 8

Published Mar 31, 2021

Modified 1 years ago

Details

kopano-ical (formerly zarafa-ical) in Kopano Groupware Core through 8.7.16, 9.x through 9.1.0, 10.x through 10.0.7, and 11.x through 11.0.1 and Zarafa 6.30.x through 7.2.x allows memory exhaustion via long HTTP headers.

References

http://www.openwall.com/lists/oss-security/2021/04/01/1

http://www.openwall.com/lists/oss-security/2021/04/25/1

https://www.cve.org/CVERecord?id=CVE-2021-28994

https://www.openwall.com/lists/oss-security/2021/03/19/6

CVSS Analysis

CVSS v3.1

7.5

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

Scope

UnchangedS:U

Impact

Confidentiality

NoneC:N

Integrity

NoneI:N

Availability

HighA:H

7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Ecosystems

Timeline

PublishedMar 31, 2021

ModifiedAug 3, 2024