medium5.9
CVE-2017-17689
The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL.
Impact
The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| 9folders | Nine | All versions |
| Apple | All versions | |
| Bloop | Airmail | All versions |
| Emclient | Emclient | All versions |
| Flipdogsolutions | Maildroid | All versions |
| Freron | Mailmate | All versions |
| Gnome | Evolution | All versions |
| Gmail | All versions | |
| Horde | Horde Imp | All versions |
| Ibm | Notes | All versions |
| Kde | Kmail | All versions |
| Kde | Trojita | All versions |
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/104165
- https://efail.de
- https://news.ycombinator.com/item?id=17066419
- https://pastebin.com/gNCc8aYm
- https://twitter.com/matthew_d_green/status/996371541591019520
- https://www.synology.com/support/security/Synology_SA_18_22
- http://www.securityfocus.com/bid/104165
- https://efail.de
- https://news.ycombinator.com/item?id=17066419
- https://pastebin.com/gNCc8aYm
- https://twitter.com/matthew_d_green/status/996371541591019520
- https://www.synology.com/support/security/Synology_SA_18_22