CVE-2017-17689 | BDVDB-2026-100730 Detail

Description#

The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://news.ycombinator.com/item?id=17066419
https://pastebin.com/gNCc8aYm
http://www.securityfocus.com/bid/104165
https://twitter.com/matthew_d_green/status/996371541591019520
https://efail.de
https://www.synology.com/support/security/Synology_SA_18_22

Exploit#

No public exploit known

History#

Version 12018-05-16Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.