{
  "cveId": "CVE-2017-17689",
  "url": "https://patchblox.com/security/cve/CVE-2017-17689",
  "summary": "CVE-2017-17689 is fixed in 19 products on 1 platform, first by thunderbird 1:52.8.0\u002Bbuild1-0ubuntu0.18.04.1, released May 22, 2018. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "thunderbird: The S/MIME specification allows a Cipher Block Chaining (CBC)malleability-gadget attack that can indirectly lead to p...",
  "description": "The S/MIME specification allows a Cipher Block Chaining (CBC)malleability-gadget attack that can indirectly lead to plaintextexfiltration, aka EFAIL.",
  "published": "2018-05-16T12:29:00Z",
  "severity": "Medium",
  "epss": 0.04144,
  "epssPercentile": 0.90895,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "kf5-messagelib-data",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4:17.12.3-0ubuntu3\u002Besm1",
      "fix": "kf5-messagelib-data 4:17.12.3-0ubuntu3\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-kf5-messagelib-data-4-17.12.3-0ubuntu3-esm1",
      "released": "2019-04-07T08:29:00Z"
    },
    {
      "platform": "linux",
      "product": "kmail",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4:17.12.3-0ubuntu1\u002Besm1",
      "fix": "kmail 4:17.12.3-0ubuntu1\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-kmail-4-17.12.3-0ubuntu1-esm1",
      "released": "2020-04-17T11:15:00Z"
    },
    {
      "platform": "linux",
      "product": "ktnef",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4:17.12.3-0ubuntu1\u002Besm1",
      "fix": "ktnef 4:17.12.3-0ubuntu1\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-ktnef-4-17.12.3-0ubuntu1-esm1",
      "released": "2020-04-17T11:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libkf5messagecomposer5abi2",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4:17.12.3-0ubuntu3\u002Besm1",
      "fix": "libkf5messagecomposer5abi2 4:17.12.3-0ubuntu3\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libkf5messagecomposer5abi2-4-17.12.3-0ubuntu3-esm1",
      "released": "2019-04-07T08:29:00Z"
    },
    {
      "platform": "linux",
      "product": "libkf5messagecore5abi2",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4:17.12.3-0ubuntu3\u002Besm1",
      "fix": "libkf5messagecore5abi2 4:17.12.3-0ubuntu3\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libkf5messagecore5abi2-4-17.12.3-0ubuntu3-esm1",
      "released": "2019-04-07T08:29:00Z"
    },
    {
      "platform": "linux",
      "product": "libkf5messagelist5abi1",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4:17.12.3-0ubuntu3\u002Besm1",
      "fix": "libkf5messagelist5abi1 4:17.12.3-0ubuntu3\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libkf5messagelist5abi1-4-17.12.3-0ubuntu3-esm1",
      "released": "2019-04-07T08:29:00Z"
    },
    {
      "platform": "linux",
      "product": "libkf5messageviewer-plugins",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4:17.12.3-0ubuntu3\u002Besm1",
      "fix": "libkf5messageviewer-plugins 4:17.12.3-0ubuntu3\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libkf5messageviewer-plugins-4-17.12.3-0ubuntu3-esm1",
      "released": "2019-04-07T08:29:00Z"
    },
    {
      "platform": "linux",
      "product": "libkf5messageviewer5abi4",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4:17.12.3-0ubuntu3\u002Besm1",
      "fix": "libkf5messageviewer5abi4 4:17.12.3-0ubuntu3\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libkf5messageviewer5abi4-4-17.12.3-0ubuntu3-esm1",
      "released": "2019-04-07T08:29:00Z"
    },
    {
      "platform": "linux",
      "product": "libkf5mimetreeparser5abi2",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4:17.12.3-0ubuntu3\u002Besm1",
      "fix": "libkf5mimetreeparser5abi2 4:17.12.3-0ubuntu3\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libkf5mimetreeparser5abi2-4-17.12.3-0ubuntu3-esm1",
      "released": "2019-04-07T08:29:00Z"
    },
    {
      "platform": "linux",
      "product": "libkf5templateparser5abi2",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4:17.12.3-0ubuntu3\u002Besm1",
      "fix": "libkf5templateparser5abi2 4:17.12.3-0ubuntu3\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libkf5templateparser5abi2-4-17.12.3-0ubuntu3-esm1",
      "released": "2019-04-07T08:29:00Z"
    },
    {
      "platform": "linux",
      "product": "libkf5webengineviewer5abi3",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4:17.12.3-0ubuntu3\u002Besm1",
      "fix": "libkf5webengineviewer5abi3 4:17.12.3-0ubuntu3\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libkf5webengineviewer5abi3-4-17.12.3-0ubuntu3-esm1",
      "released": "2019-04-07T08:29:00Z"
    },
    {
      "platform": "linux",
      "product": "thunderbird",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:52.8.0\u002Bbuild1-0ubuntu0.18.04.1",
      "fix": "thunderbird 1:52.8.0\u002Bbuild1-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-thunderbird-1-52.8.0-build1-0ubuntu0.18.04.1",
      "released": "2018-05-22T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "thunderbird",
      "release": "Ubuntu 24.10 (oracular)",
      "fixedVersion": "1:60.2.1\u002Bbuild1-0ubuntu1",
      "fix": "thunderbird 1:60.2.1\u002Bbuild1-0ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-oracular-thunderbird-1-60.2.1-build1-0ubuntu1",
      "released": "2026-01-16T01:42:22Z"
    },
    {
      "platform": "linux",
      "product": "thunderbird",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "1:60.2.1\u002Bbuild1-0ubuntu1",
      "fix": "thunderbird 1:60.2.1\u002Bbuild1-0ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-thunderbird-1-60.2.1-build1-0ubuntu1",
      "released": "2026-01-16T01:42:24Z"
    },
    {
      "platform": "linux",
      "product": "thunderbird-globalmenu",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:52.8.0\u002Bbuild1-0ubuntu0.18.04.1",
      "fix": "thunderbird-globalmenu 1:52.8.0\u002Bbuild1-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-thunderbird-globalmenu-1-52.8.0-build1-0ubuntu0.18.04.1",
      "released": "2018-05-22T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "thunderbird-gnome-support",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:52.8.0\u002Bbuild1-0ubuntu0.18.04.1",
      "fix": "thunderbird-gnome-support 1:52.8.0\u002Bbuild1-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-thunderbird-gnome-support-1-52.8.0-build1-0ubuntu0.18.04.1",
      "released": "2018-05-22T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "thunderbird-mozsymbols",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:52.8.0\u002Bbuild1-0ubuntu0.18.04.1",
      "fix": "thunderbird-mozsymbols 1:52.8.0\u002Bbuild1-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-thunderbird-mozsymbols-1-52.8.0-build1-0ubuntu0.18.04.1",
      "released": "2018-05-22T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "thunderbird-testsuite",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:52.8.0\u002Bbuild1-0ubuntu0.18.04.1",
      "fix": "thunderbird-testsuite 1:52.8.0\u002Bbuild1-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-thunderbird-testsuite-1-52.8.0-build1-0ubuntu0.18.04.1",
      "released": "2018-05-22T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "xul-ext-calendar-timezones",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:52.8.0\u002Bbuild1-0ubuntu0.18.04.1",
      "fix": "xul-ext-calendar-timezones 1:52.8.0\u002Bbuild1-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-xul-ext-calendar-timezones-1-52.8.0-build1-0ubuntu0.18.04.1",
      "released": "2018-05-22T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "xul-ext-gdata-provider",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:52.8.0\u002Bbuild1-0ubuntu0.18.04.1",
      "fix": "xul-ext-gdata-provider 1:52.8.0\u002Bbuild1-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-xul-ext-gdata-provider-1-52.8.0-build1-0ubuntu0.18.04.1",
      "released": "2018-05-22T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "xul-ext-lightning",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:52.8.0\u002Bbuild1-0ubuntu0.18.04.1",
      "fix": "xul-ext-lightning 1:52.8.0\u002Bbuild1-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-xul-ext-lightning-1-52.8.0-build1-0ubuntu0.18.04.1",
      "released": "2018-05-22T17:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T12:40:37Z"
}