Oval Definition:
oval:com.ubuntu.bionic:def:2017176890000000
Revision Date
:
2018-05-16
Version
:
1
Title
:
CVE-2017-17689 on Ubuntu 18.04 LTS (bionic) - medium.
Description
:
The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL.
Family
:
unix
Class
:
vulnerability
Status
:
Reference(s)
:
CVE-2017-17689
Platform(s)
:
Ubuntu 18.04 LTS
Product(s)
:
Definition Synopsis
Ubuntu 18.04 LTS (bionic) is installed.
AND
Package Information
kmail package in bionic is affected and may need fixing.
OR
thunderbird package in bionic was vulnerable but has been fixed (note: '1:52.8.0+build1-0ubuntu0.18.04.1').
BACK