Lucene search
Redhat.comRH:CVE-2017-17688HistoryApr 04, 2020 - 5:18 p.m.
CVE-2017-17688
2020-04-0417:18:47
redhat.com
access.redhat.com
9
0.008 Low
EPSS
Percentile
82.2%
DISPUTED The OpenPGP specification allows a Cipher Feedback Mode (CFB) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL. NOTE: third parties report that this is a problem in applications that mishandle the Modification Detection Code (MDC) feature or accept an obsolete packet type, not a problem in the OpenPGP specification.
Mitigation
The easiest way to mitigate this vulnerability is not to use HTML emails. If you really need to use them ensure that MUA clients disable external links embedded in HTML emails. For example in thunderbird email client, Edit->Preferences->Privacy->Disable "Allow remote content in messages".
Related
cvelist
cvelist
CVE-2017-17688
2018-05-16 19:00:00
CVE-2018-19205
2022-10-03 16:21:55
nessus
nessus
Fedora 26 : thunderbird-enigmail (2018-6020628437) (EFAIL)
2018-05-29 00:00:00
Fedora 27 : thunderbird-enigmail (2018-25525a9346) (EFAIL)
2018-05-29 00:00:00
Fedora 28 : thunderbird-enigmail (2018-77fe2e20ad) (EFAIL)
2019-01-03 00:00:00
debiancve
debiancve
CVE-2017-17688
2018-05-16 19:29:00
CVE-2018-19205
2022-10-03 16:21:55
prion
prion
Design/Logic Flaw
2018-05-16 19:29:00
Design/Logic Flaw
2018-11-12 17:29:00
ubuntucve
ubuntucve
CVE-2017-17688
2018-05-16 00:00:00
CVE-2018-19205
2018-11-12 00:00:00
cve
cve
CVE-2017-17688
2018-05-16 19:29:00
CVE-2018-19205
2022-10-03 16:21:55
nvd
nvd
CVE-2017-17688
2018-05-16 19:29:00
CVE-2018-19205
2018-11-12 17:29:00
openvas
openvas
openSUSE: Security Advisory for enigmail (openSUSE-SU-2018:1347-1)
2018-10-26 00:00:00
Roundcube Webmail < 1.3.7 Enigma Plugin PGP Vulnerability (EFAIL)
2018-08-26 00:00:00
openSUSE: Security Advisory for enigmail (openSUSE-SU-2018:1393-1)
2018-05-24 00:00:00
fedora
fedora
[SECURITY] Fedora 26 Update: thunderbird-enigmail-2.0.4-1.fc26
2018-05-27 19:19:09
[SECURITY] Fedora 27 Update: thunderbird-enigmail-2.0.4-1.fc27
2018-05-27 19:51:43
[SECURITY] Fedora 28 Update: thunderbird-enigmail-2.0.4-1.fc28
2018-05-24 13:59:48
seebug
seebug
OpenPGPγS/MIME information disclosure (CVE-2017-17688,CVE-2017-17689)
2018-05-16 00:00:00
suse
suse
Security update for enigmail (moderate)
2018-05-17 18:07:41
Security update for enigmail (moderate)
2018-05-23 21:22:55
Security update for enigmail (moderate)
2018-05-17 18:07:05
osv
osv
CVE-2018-19205
2018-11-12 17:29:00
cert
cert
OpenPGP and S/MIME mail client vulnerabilities
2018-05-14 00:00:00