What’s Vulnerable › Vulnerabilities

CVE-2017-17689

• Severity: medium (CVSS 5.9 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-05-16 · updated 2026-06-17

Description

The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL.

Affected products

• 9Folders Nine: all versions
• Apple Mail: all versions
• Bloop Airmail: all versions
• Emclient: all versions
• Flipdogsolutions Maildroid: all versions
• Freron Mailmate: all versions
• GNOME Evolution: all versions
• Google Gmail: all versions
• Horde Imp: all versions
• IBM Notes: all versions
• KDE Kmail: all versions
• KDE Trojita: all versions
• Microsoft Outlook: 2007, 2010, 2013, 2016
• Mozilla Thunderbird: all versions
• Postbox-Inc Postbox: all versions
• R2Mail2: all versions
• Ritlabs The Bat: all versions

References

• http://www.securityfocus.com/bid/104165
• https://efail.de
• https://news.ycombinator.com/item?id=17066419
• https://pastebin.com/gNCc8aYm
• https://twitter.com/matthew_d_green/status/996371541591019520
• https://www.synology.com/support/security/Synology_SA_18_22
• http://www.securityfocus.com/bid/104165
• https://efail.de
• https://news.ycombinator.com/item?id=17066419
• https://pastebin.com/gNCc8aYm
• https://twitter.com/matthew_d_green/status/996371541591019520
• https://www.synology.com/support/security/Synology_SA_18_22

Get alerted when CVE-2017-17689 or the next vulnerability affects your stack