CVE-2021-38373
CVE-2021-38373
This page contains facts from public vulnerability sources. Check the original advisory before updating.
In KDE KMail 19.12.3 (aka 5.13.3), the SMTP STARTTLS option is not honored (and cleartext messages are sent) unless "Server requires authentication" is checked.
CVSS 5.3 · Medium · EPSS 0.5% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
ksmtp Debian:12
- Affected ranges
- ECOSYSTEM: < 21.12.3-2
Update to 21.12.3-2
ksmtp Debian:13
- Affected ranges
- ECOSYSTEM: < 21.12.3-2
Update to 21.12.3-2
ksmtp Debian:14
- Affected ranges
- ECOSYSTEM: < 21.12.3-2
Update to 21.12.3-2
kmailtransport Ubuntu:18.04:LTS
- Versions
- 17.04.3-0ubuntu1
- 17.08.3-0ubuntu2
- 17.08.3-0ubuntu3
- 17.12.2-0ubuntu1
- 17.12.3-0ubuntu3
- 17.12.3-0ubuntu4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ksmtp Ubuntu:18.04:LTS
- Versions
- 17.12.2-0ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
kmailtransport Ubuntu:20.04:LTS
- Versions
- 19.04.3-0ubuntu1
- 19.04.3-0ubuntu2
- 19.12.3-0ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ksmtp Ubuntu:20.04:LTS
- Versions
- 19.04.3-0ubuntu1
- 19.04.3-0ubuntu2
- 19.12.3-0ubuntu1
- 19.12.3-0ubuntu2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published