CVE-2017-17688

Fixed in a distro release EPSS 5%

The OpenPGP specification allows a Cipher Feedback Mode (CFB) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL. NOTE: third parties report that this is a problem in applications that mishandle the Modification Detection Code (MDC) feature or accept an obsolete packet type, not a problem in the OpenPGP specification

Published 2018-05-16 · CVE record · OSV

Products: apple mail, bloop airmail, emclient, flipdogsolutions maildroid, freron mailmate, horde_imp, microsoft outlook, mozilla thunderbird, postbox-inc postbox, r2mail2, roundcube webmail

Distro releases