p PatchFirst

CVE-2017-9604

CVE-2017-9604

This page contains facts from public vulnerability sources. Check the original advisory before updating.

KDE kmail before 5.5.2 and messagelib before 5.5.2, as distributed in KDE Applications before 17.04.2, do not ensure that a plugin's sign/encrypt action occurs during use of the Send Later feature, which allows remote attackers to obtain sensitive information by sniffing the network.

CVSS 7.5 · High · EPSS 1.3% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • kf5-messagelib Debian:12

    Affected ranges
    • ECOSYSTEM: < 4:16.04.3-3

    Update to 4:16.04.3-3

  • kdepim Ubuntu:14.04:LTS

    Versions
    • 4:4.11.2-0ubuntu1
    • 4:4.11.2-0ubuntu2
    • 4:4.11.80-0ubuntu1
    • 4:4.11.95-0ubuntu1
    • 4:4.11.97-0ubuntu1
    • 4:4.12.0-0ubuntu1
    • 4:4.12.1-0ubuntu1
    • 4:4.12.2-0ubuntu1
    • 4:4.12.3-0ubuntu1
    • 4:4.12.90-0ubuntu1
    • 4:4.12.90-0ubuntu2
    • 4:4.12.95-0ubuntu1
    • 4:4.12.97-0ubuntu1
    • 4:4.13.0-0ubuntu1
    • 4:4.13.1-0ubuntu0.1
    • 4:4.13.2-0ubuntu0.1
    • 4:4.13.3-0ubuntu0.1
    Affected ranges
    • ECOSYSTEM: < 4:4.13.3-0ubuntu0.2

    Update to 4:4.13.3-0ubuntu0.2

  • kdepim Ubuntu:16.04:LTS

    Versions
    • 4:15.08.2-0ubuntu1
    • 4:15.12.1-1ubuntu6
    • 4:15.12.3-0ubuntu1
    Affected ranges
    • ECOSYSTEM: < 4:15.12.3-0ubuntu1.1

    Update to 4:15.12.3-0ubuntu1.1

Original sources

Check your server →