DEBIAN-CVE-2017-17689

See a problem?
Please try reporting it to the source first.
Source
https://security-tracker.debian.org/tracker/CVE-2017-17689
Import Source
https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2017-17689.json
JSON Data
https://api.test.osv.dev/v1/vulns/DEBIAN-CVE-2017-17689
Upstream
Published
2018-05-16T19:29:00.303Z
Modified
2025-11-17T04:18:53.794075Z
Severity
  • 5.9 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL.

References

Affected packages

Debian:11

evolution

Package

Name
evolution
Purl
pkg:deb/debian/evolution?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

3.*

3.38.3-1
3.38.3-1+deb11u1
3.38.3-1+deb11u2
3.39.2-1
3.39.3-1
3.40.0-1
3.40.1-1
3.40.2-1
3.40.4-1
3.42.0-1
3.42.0-2
3.42.1-1
3.42.2-1
3.42.3-1
3.42.4-1
3.43.2-1
3.43.2-2
3.43.3-1
3.44.0-1
3.44.0-2
3.44.1-1
3.44.1-2
3.44.2-1
3.44.3-1
3.44.3-2
3.44.4-1
3.45.2-1
3.45.2-2
3.45.3-1
3.45.3-2
3.46.0-1
3.46.0-2
3.46.1-1
3.46.2-1
3.46.3-1
3.46.4-1
3.46.4-2
3.47.2-1
3.47.3-1
3.48.0-1
3.48.1-1
3.48.2-1
3.48.3-1
3.48.4-1
3.49.2-1
3.49.2-2
3.49.2-3
3.49.3-1
3.50.0-1
3.50.1-1
3.50.2-1
3.50.3-1
3.51.2-1
3.52.0-1
3.52.1-1
3.52.1-2
3.52.1-3
3.52.1-4
3.52.2-1
3.52.2-2
3.52.3-1
3.53.2-1
3.53.3-1
3.54.0-1
3.54.1-1
3.54.2-1
3.54.3-1
3.54.3-2
3.55.1-1
3.55.1-2
3.55.2-1
3.55.3-1
3.56.0-1
3.56.1-1
3.56.2-1
3.56.2-2
3.56.2-3
3.56.2-4
3.56.2-5
3.56.2-7

Ecosystem specific 

{
    "urgency": "unimportant"
}

kf5-messagelib

Package

Name
kf5-messagelib
Purl
pkg:deb/debian/kf5-messagelib?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4:18.08.1-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:12

evolution

Package

Name
evolution
Purl
pkg:deb/debian/evolution?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

3.*

3.46.4-2
3.46.4-2+deb12u1
3.47.2-1
3.47.3-1
3.48.0-1
3.48.1-1
3.48.2-1
3.48.3-1
3.48.4-1
3.49.2-1
3.49.2-2
3.49.2-3
3.49.3-1
3.50.0-1
3.50.1-1
3.50.2-1
3.50.3-1
3.51.2-1
3.52.0-1
3.52.1-1
3.52.1-2
3.52.1-3
3.52.1-4
3.52.2-1
3.52.2-2
3.52.3-1
3.53.2-1
3.53.3-1
3.54.0-1
3.54.1-1
3.54.2-1
3.54.3-1
3.54.3-2
3.55.1-1
3.55.1-2
3.55.2-1
3.55.3-1
3.56.0-1
3.56.1-1
3.56.2-1
3.56.2-2
3.56.2-3
3.56.2-4
3.56.2-5
3.56.2-7

Ecosystem specific 

{
    "urgency": "unimportant"
}

kf5-messagelib

Package

Name
kf5-messagelib
Purl
pkg:deb/debian/kf5-messagelib?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4:18.08.1-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:13

evolution

Package

Name
evolution
Purl
pkg:deb/debian/evolution?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

3.*

3.56.1-1
3.56.1-1+deb13u1
3.56.2-0+deb13u1
3.56.2-1
3.56.2-2
3.56.2-3
3.56.2-4
3.56.2-5
3.56.2-7

Ecosystem specific 

{
    "urgency": "unimportant"
}

Debian:14

evolution

Package

Name
evolution
Purl
pkg:deb/debian/evolution?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

3.*

3.56.1-1
3.56.2-1
3.56.2-2
3.56.2-3
3.56.2-4
3.56.2-5
3.56.2-7

Ecosystem specific 

{
    "urgency": "unimportant"
}