← Back

CVE-2017-17688

nvd nist
Published: May 16, 2018Modified: Nov 21, 2024

JSON object

Loading...
5.9
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 2.2 / Impact: 3.6
Source: NVD

Description

The OpenPGP specification allows a Cipher Feedback Mode (CFB) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL. NOTE: third parties report that this is a problem in applications that mishandle the Modification Detection Code (MDC) feature or accept an obsolete packet type, not a problem in the OpenPGP specification

Affected (12)

Products: Apple: Mail · Bloop: Airmail · Emclient: Emclient · +8 more
Show all products
Apple: Mail · Bloop: Airmail · Emclient: Emclient · Flipdogsolutions: Maildroid · Freron: Mailmate · Horde: Horde Imp · Microsoft: Outlook · Mozilla: Thunderbird · Postbox Inc: Postbox · R2mail2: R2mail2 · Roundcube: Webmail
Apple
1 product
Mail
Bloop
1 product
Airmail
Emclient
1 product
Emclient
Flipdogsolutions
1 product
Maildroid
Freron
1 product
Mailmate
Horde
1 product
Horde Imp
Microsoft
1 product
Outlook
Mozilla
1 product
Thunderbird
Postbox Inc
1 product
Postbox
R2mail2
1 product
R2mail2
Roundcube
1 product
Webmail
Configuration A
12 vulnerable
Vulnerable SoftwareAffected Versions
Apple
Mail
All versions
Mail
All versions
Airmail
All versions
Emclient
All versions
Maildroid
All versions
Mailmate
All versions
Horde Imp
All versions
Outlook
Version 2007
Thunderbird
All versions
Postbox
All versions
R2mail2
All versions
Webmail
All versions

References (20)

Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party AdvisoryVDB Entry
Source: cve@mitre.org
Third Party AdvisoryVDB Entry
Source: cve@mitre.org
ExploitMitigationThird Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Issue TrackingThird Party Advisory
Source: cve@mitre.org
Issue TrackingThird Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Issue TrackingThird Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitMitigationThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.