Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2017-9604

Опубликовано: 13 июн. 2017
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 5
CVSS3: 7.5

Описание

KDE kmail before 5.5.2 and messagelib before 5.5.2, as distributed in KDE Applications before 17.04.2, do not ensure that a plugin's sign/encrypt action occurs during use of the Send Later feature, which allows remote attackers to obtain sensitive information by sniffing the network.

РелизСтатусПримечание
artful

DNE

devel

DNE

esm-apps/xenial

released

4:15.12.3-0ubuntu1.1
esm-infra-legacy/trusty

released

4:4.13.3-0ubuntu0.2
precise/esm

DNE

trusty

released

4:4.13.3-0ubuntu0.2
trusty/esm

released

4:4.13.3-0ubuntu0.2
upstream

needed

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

Показывать по

РелизСтатусПримечание
artful

released

4:16.12.3-0ubuntu3
devel

not-affected

esm-infra-legacy/trusty

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

needed

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

xenial

DNE

Показывать по

Ссылки на источники

EPSS

Процентиль: 49%
0.00263
Низкий

5 Medium

CVSS2

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 5.4
redhat
больше 8 лет назад

KDE kmail before 5.5.2 and messagelib before 5.5.2, as distributed in KDE Applications before 17.04.2, do not ensure that a plugin's sign/encrypt action occurs during use of the Send Later feature, which allows remote attackers to obtain sensitive information by sniffing the network.

CVSS3: 7.5
nvd
больше 8 лет назад

KDE kmail before 5.5.2 and messagelib before 5.5.2, as distributed in KDE Applications before 17.04.2, do not ensure that a plugin's sign/encrypt action occurs during use of the Send Later feature, which allows remote attackers to obtain sensitive information by sniffing the network.

CVSS3: 7.5
debian
больше 8 лет назад

KDE kmail before 5.5.2 and messagelib before 5.5.2, as distributed in ...

suse-cvrf
больше 8 лет назад

Security update for kdepim4

CVSS3: 7.5
github
больше 3 лет назад

KDE kmail before 5.5.2 and messagelib before 5.5.2, as distributed in KDE Applications before 17.04.2, do not ensure that a plugin's sign/encrypt action occurs during use of the Send Later feature, which allows remote attackers to obtain sensitive information by sniffing the network.

EPSS

Процентиль: 49%
0.00263
Низкий

5 Medium

CVSS2

7.5 High

CVSS3