{"id":"UBUNTU-CVE-2019-19907","details":"HrAddFBBlock in libfreebusy/freebusyutil.cpp in Kopano Groupware Core before 8.7.7 allows out-of-bounds access, as demonstrated by mishandling of an array copy during parsing of ICal data.","modified":"2026-04-22T12:15:30.209574Z","published":"2019-12-19T18:15:00Z","related":["USN-6876-1"],"upstream":["CVE-2019-19907"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2019-19907"},{"type":"REPORT","url":"https://stash.kopano.io/projects/KC/repos/kopanocore/commits/4e02b420fff"},{"type":"REPORT","url":"https://stash.kopano.io/projects/KC/repos/kopanocore/browse/RELNOTES.txt"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2019-19907"},{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-6876-1"}],"affected":[{"package":{"name":"kopanocore","ecosystem":"Ubuntu:Pro:18.04:LTS","purl":"pkg:deb/ubuntu/kopanocore@8.5.5-0ubuntu1+esm1?arch=source&distro=esm-apps/bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.5.5-0ubuntu1+esm1"}]}],"versions":["8.1.0-3ubuntu5","8.1.0-3ubuntu6","8.3.4-4ubuntu4","8.5.2-1ubuntu1","8.5.5-0ubuntu1"],"ecosystem_specific":{"availability":"Available with Ubuntu Pro: https://ubuntu.com/pro","binaries":[{"binary_name":"kopano-archiver","binary_version":"8.5.5-0ubuntu1+esm1"},{"binary_name":"kopano-backup","binary_version":"8.5.5-0ubuntu1+esm1"},{"binary_name":"kopano-common","binary_version":"8.5.5-0ubuntu1+esm1"},{"binary_name":"kopano-contacts","binary_version":"8.5.5-0ubuntu1+esm1"},{"binary_name":"kopano-core","binary_version":"8.5.5-0ubuntu1+esm1"},{"binary_version":"8.5.5-0ubuntu1+esm1","binary_name":"kopano-dagent"},{"binary_name":"kopano-gateway","binary_version":"8.5.5-0ubuntu1+esm1"},{"binary_name":"kopano-ical","binary_version":"8.5.5-0ubuntu1+esm1"},{"binary_name":"kopano-l10n","binary_version":"8.5.5-0ubuntu1+esm1"},{"binary_name":"kopano-libs","binary_version":"8.5.5-0ubuntu1+esm1"},{"binary_name":"kopano-monitor","binary_version":"8.5.5-0ubuntu1+esm1"},{"binary_name":"kopano-presence","binary_version":"8.5.5-0ubuntu1+esm1"},{"binary_version":"8.5.5-0ubuntu1+esm1","binary_name":"kopano-search"},{"binary_name":"kopano-server","binary_version":"8.5.5-0ubuntu1+esm1"},{"binary_name":"kopano-spooler","binary_version":"8.5.5-0ubuntu1+esm1"},{"binary_name":"kopano-utils","binary_version":"8.5.5-0ubuntu1+esm1"},{"binary_version":"8.5.5-0ubuntu1+esm1","binary_name":"php-mapi"},{"binary_name":"php7.1-mapi","binary_version":"8.5.5-0ubuntu1+esm1"},{"binary_name":"python-kopano","binary_version":"8.5.5-0ubuntu1+esm1"},{"binary_name":"python-mapi","binary_version":"8.5.5-0ubuntu1+esm1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2019/UBUNTU-CVE-2019-19907.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}]}