CVE-2017-17689

The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL.
References
Link Resource
http://www.securityfocus.com/bid/104165 Third Party Advisory VDB Entry
https://efail.de Exploit Mitigation Third Party Advisory
https://news.ycombinator.com/item?id=17066419 Issue Tracking Third Party Advisory
https://pastebin.com/gNCc8aYm Third Party Advisory
https://twitter.com/matthew_d_green/status/996371541591019520 Third Party Advisory
https://www.synology.com/support/security/Synology_SA_18_22 Third Party Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:9folders:nine:-:*:*:*:*:*:*:*
cpe:2.3:a:apple:mail:-:*:*:*:*:*:*:*
cpe:2.3:a:apple:mail:-:*:*:*:*:iphone_os:*:*
cpe:2.3:a:bloop:airmail:-:*:*:*:*:*:*:*
cpe:2.3:a:emclient:emclient:-:*:*:*:*:*:*:*
cpe:2.3:a:flipdogsolutions:maildroid:-:*:*:*:*:*:*:*
cpe:2.3:a:freron:mailmate:-:*:*:*:*:*:*:*
cpe:2.3:a:gnome:evolution:-:*:*:*:*:*:*:*
cpe:2.3:a:google:gmail:-:*:*:*:*:*:*:*
cpe:2.3:a:horde:horde_imp:-:*:*:*:*:*:*:*
cpe:2.3:a:ibm:notes:-:*:*:*:*:*:*:*
cpe:2.3:a:kde:kmail:-:*:*:*:*:*:*:*
cpe:2.3:a:kde:trojita:-:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:outlook:2007:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:outlook:2010:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:outlook:2013:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:outlook:2016:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:-:*:*:*:*:*:*:*
cpe:2.3:a:postbox-inc:postbox:-:*:*:*:*:*:*:*
cpe:2.3:a:r2mail2:r2mail2:-:*:*:*:*:*:*:*
cpe:2.3:a:ritlabs:the_bat:-:*:*:*:*:*:*:*

Information

Published : 2018-05-16 19:29

Updated : 2019-10-03 00:03


NVD link : CVE-2017-17689

Mitre link : CVE-2017-17689


JSON object : View

Products Affected

postbox-inc

  • postbox

9folders

  • nine

gnome

  • evolution

r2mail2

  • r2mail2

bloop

  • airmail

emclient

  • emclient

flipdogsolutions

  • maildroid

apple

  • mail

kde

  • trojita
  • kmail

freron

  • mailmate

mozilla

  • thunderbird

google

  • gmail

ibm

  • notes

microsoft

  • outlook

horde

  • horde_imp

ritlabs

  • the_bat