CVE Vulnerabilities

CVE-2017-17689

Published: May 16, 2018 | Modified: Nov 21, 2024
CVSS 3.x
5.9
MEDIUM
Source:
NVD
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
5.3 MODERATE
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
Ubuntu
MEDIUM

The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL.

Affected Software

Name Vendor Start Version End Version
Nine 9folders - (including) - (including)
Mail Apple - (including) - (including)
Airmail Bloop - (including) - (including)
Emclient Emclient - (including) - (including)
Maildroid Flipdogsolutions - (including) - (including)
Mailmate Freron - (including) - (including)
Evolution Gnome - (including) - (including)
Gmail Google - (including) - (including)
Horde_imp Horde - (including) - (including)
Notes Ibm - (including) - (including)
Kmail Kde - (including) - (including)
Trojita Kde - (including) - (including)
Outlook Microsoft 2007 (including) 2007 (including)
Outlook Microsoft 2010 (including) 2010 (including)
Outlook Microsoft 2013 (including) 2013 (including)
Outlook Microsoft 2016 (including) 2016 (including)
Thunderbird Mozilla - (including) - (including)
Postbox Postbox-inc - (including) - (including)
R2mail2 R2mail2 - (including) - (including)
The_bat Ritlabs - (including) - (including)
Evolution Ubuntu artful *
Kmail Ubuntu artful *
Kmail Ubuntu bionic *
Kmail Ubuntu cosmic *
Kmail Ubuntu disco *
Kmail Ubuntu eoan *
Kmail Ubuntu groovy *
Kmail Ubuntu hirsute *
Kmail Ubuntu impish *
Kmail Ubuntu kinetic *
Kmail Ubuntu lunar *
Kmail Ubuntu mantic *
Thunderbird Ubuntu artful *
Thunderbird Ubuntu bionic *
Thunderbird Ubuntu cosmic *
Thunderbird Ubuntu devel *
Thunderbird Ubuntu disco *
Thunderbird Ubuntu eoan *
Thunderbird Ubuntu focal *
Thunderbird Ubuntu groovy *
Thunderbird Ubuntu hirsute *
Thunderbird Ubuntu impish *
Thunderbird Ubuntu jammy *
Thunderbird Ubuntu kinetic *
Thunderbird Ubuntu lunar *
Thunderbird Ubuntu mantic *
Thunderbird Ubuntu noble *
Thunderbird Ubuntu oracular *
Thunderbird Ubuntu trusty *
Thunderbird Ubuntu xenial *

References