DEBIAN-CVE-2017-17689
- Source
- https://security-tracker.debian.org/tracker/CVE-2017-17689
- Import Source
- https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2017-17689.json
- JSON Data
- https://api.osv.dev/v1/vulns/DEBIAN-CVE-2017-17689
- Upstream
- Published
- 2018-05-16T19:29:00Z
- Modified
- 2026-09-01T20:03:46Z
- Severity
-
- 5.9 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
- Summary
- [none]
- Details
-
The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL.
- References
Affected packages
Debian:12 / evolution
Package
- Name
- evolution
- Purl
- pkg:deb/debian/evolution?arch=source&distro=bookworm
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affected
Affected versions
3.*
3.46.4-2
3.46.4-2+deb12u1
3.47.2-1
3.47.3-1
3.48.0-1
3.48.1-1
3.48.2-1
3.48.3-1
3.48.4-1
3.49.2-1
3.49.2-2
3.49.2-3
3.49.3-1
3.50.0-1
3.50.1-1
3.50.2-1
3.50.3-1
3.51.2-1
3.52.0-1
3.52.1-1
3.52.1-2
3.52.1-3
3.52.1-4
3.52.2-1
3.52.2-2
3.52.3-1
3.53.2-1
3.53.3-1
3.54.0-1
3.54.1-1
3.54.2-1
3.54.3-1
3.54.3-2
3.55.1-1
3.55.1-2
3.55.2-1
3.55.3-1
3.56.0-1
3.56.1-1
3.56.2-1
3.56.2-2
3.56.2-3
3.56.2-4
3.56.2-5
3.56.2-7
3.56.2-8
3.56.2-9
3.56.2-10
Debian:13 / evolution
Package
- Name
- evolution
- Purl
- pkg:deb/debian/evolution?arch=source&distro=trixie
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affected
Debian:14 / evolution
Package
- Name
- evolution
- Purl
- pkg:deb/debian/evolution?arch=source&distro=forky
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affected
Debian:12 / kf5-messagelib
Package
- Name
- kf5-messagelib
- Purl
- pkg:deb/debian/kf5-messagelib?arch=source&distro=bookworm