CVE-2017-9604
Fixed in a distro release EPSS 1%
KDE kmail before 5.5.2 and messagelib before 5.5.2, as distributed in KDE Applications before 17.04.2, do not ensure that a plugin's sign/encrypt action occurs during use of the Send Later feature, which allows remote attackers to obtain sensitive information by sniffing the network.
Products: kde kmail, kde messagelib
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | kmail | 17.04.2-1 |
| Arch Linux | messagelib | 17.04.2-1 |
| Debian 12 | kf5-messagelib | 4:16.04.3-3 |
| SUSE Package Hub 12 SP2 | kdepim | 16.08.2-5.2 |
| SUSE Package Hub 12 SP2 | messagelib | 16.08.2-5.1 |
| Ubuntu 14.04 LTS | kdepim | 4:4.13.3-0ubuntu0.2 |
| Ubuntu 16.04 LTS | kdepim | 4:15.12.3-0ubuntu1.1 |