CVE-2017-17689
thunderbird: The S/MIME specification allows a Cipher Block Chaining (CBC)malleability-gadget attack that can indirectly lead to p...
CVE-2017-17689 is fixed in 19 products on 1 platform, first by thunderbird 1:52.8.0+build1-0ubuntu0.18.04.1, released May 22, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0414
90th percentile
The S/MIME specification allows a Cipher Block Chaining (CBC)malleability-gadget attack that can indirectly lead to plaintextexfiltration, aka EFAIL.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| kf5-messagelib-data · Ubuntu 18.04.6 LTS (bionic) | 4:17.12.3-0ubuntu3+esm1 | kf5-messagelib-data 4:17.12.3-0ubuntu3+esm1 | Apr 7, 2019 |
| kmail · Ubuntu 18.04.6 LTS (bionic) | 4:17.12.3-0ubuntu1+esm1 | kmail 4:17.12.3-0ubuntu1+esm1 | Apr 17, 2020 |
| ktnef · Ubuntu 18.04.6 LTS (bionic) | 4:17.12.3-0ubuntu1+esm1 | ktnef 4:17.12.3-0ubuntu1+esm1 | Apr 17, 2020 |
| libkf5messagecomposer5abi2 · Ubuntu 18.04.6 LTS (bionic) | 4:17.12.3-0ubuntu3+esm1 | libkf5messagecomposer5abi2 4:17.12.3-0ubuntu3+esm1 | Apr 7, 2019 |
| libkf5messagecore5abi2 · Ubuntu 18.04.6 LTS (bionic) | 4:17.12.3-0ubuntu3+esm1 | libkf5messagecore5abi2 4:17.12.3-0ubuntu3+esm1 | Apr 7, 2019 |
| libkf5messagelist5abi1 · Ubuntu 18.04.6 LTS (bionic) | 4:17.12.3-0ubuntu3+esm1 | libkf5messagelist5abi1 4:17.12.3-0ubuntu3+esm1 | Apr 7, 2019 |
| libkf5messageviewer-plugins · Ubuntu 18.04.6 LTS (bionic) | 4:17.12.3-0ubuntu3+esm1 | libkf5messageviewer-plugins 4:17.12.3-0ubuntu3+esm1 | Apr 7, 2019 |
| libkf5messageviewer5abi4 · Ubuntu 18.04.6 LTS (bionic) | 4:17.12.3-0ubuntu3+esm1 | libkf5messageviewer5abi4 4:17.12.3-0ubuntu3+esm1 | Apr 7, 2019 |
| libkf5mimetreeparser5abi2 · Ubuntu 18.04.6 LTS (bionic) | 4:17.12.3-0ubuntu3+esm1 | libkf5mimetreeparser5abi2 4:17.12.3-0ubuntu3+esm1 | Apr 7, 2019 |
| libkf5templateparser5abi2 · Ubuntu 18.04.6 LTS (bionic) | 4:17.12.3-0ubuntu3+esm1 | libkf5templateparser5abi2 4:17.12.3-0ubuntu3+esm1 | Apr 7, 2019 |
| libkf5webengineviewer5abi3 · Ubuntu 18.04.6 LTS (bionic) | 4:17.12.3-0ubuntu3+esm1 | libkf5webengineviewer5abi3 4:17.12.3-0ubuntu3+esm1 | Apr 7, 2019 |
| thunderbird · Ubuntu 18.04.6 LTS (bionic) | 1:52.8.0+build1-0ubuntu0.18.04.1 | thunderbird 1:52.8.0+build1-0ubuntu0.18.04.1 | May 22, 2018 |
| thunderbird · Ubuntu 24.10 (oracular) | 1:60.2.1+build1-0ubuntu1 | thunderbird 1:60.2.1+build1-0ubuntu1 | Jan 16, 2026 |
| thunderbird · Ubuntu 25.04 (plucky) | 1:60.2.1+build1-0ubuntu1 | thunderbird 1:60.2.1+build1-0ubuntu1 | Jan 16, 2026 |
| thunderbird-globalmenu · Ubuntu 18.04.6 LTS (bionic) | 1:52.8.0+build1-0ubuntu0.18.04.1 | thunderbird-globalmenu 1:52.8.0+build1-0ubuntu0.18.04.1 | May 22, 2018 |
| thunderbird-gnome-support · Ubuntu 18.04.6 LTS (bionic) | 1:52.8.0+build1-0ubuntu0.18.04.1 | thunderbird-gnome-support 1:52.8.0+build1-0ubuntu0.18.04.1 | May 22, 2018 |
| thunderbird-mozsymbols · Ubuntu 18.04.6 LTS (bionic) | 1:52.8.0+build1-0ubuntu0.18.04.1 | thunderbird-mozsymbols 1:52.8.0+build1-0ubuntu0.18.04.1 | May 22, 2018 |
| thunderbird-testsuite · Ubuntu 18.04.6 LTS (bionic) | 1:52.8.0+build1-0ubuntu0.18.04.1 | thunderbird-testsuite 1:52.8.0+build1-0ubuntu0.18.04.1 | May 22, 2018 |
| xul-ext-calendar-timezones · Ubuntu 18.04.6 LTS (bionic) | 1:52.8.0+build1-0ubuntu0.18.04.1 | xul-ext-calendar-timezones 1:52.8.0+build1-0ubuntu0.18.04.1 | May 22, 2018 |
| xul-ext-gdata-provider · Ubuntu 18.04.6 LTS (bionic) | 1:52.8.0+build1-0ubuntu0.18.04.1 | xul-ext-gdata-provider 1:52.8.0+build1-0ubuntu0.18.04.1 | May 22, 2018 |
| xul-ext-lightning · Ubuntu 18.04.6 LTS (bionic) | 1:52.8.0+build1-0ubuntu0.18.04.1 | xul-ext-lightning 1:52.8.0+build1-0ubuntu0.18.04.1 | May 22, 2018 |