[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fDvWVahlLkHWtfZ03HGZnUOmdywEJTtZDduRan7kN5pg":3,"g5a-risk:CVE-2017-17688":201},{"success":4,"data":5,"meta":199},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":15,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":86,"references":87,"referencesCount":133,"weaknesses":134,"weaknessesCount":138,"isActivelyExploited":139,"cisaInfo":15,"otxData":15,"relatedBlogPosts":140,"seoMetadata":141,"configurations":166,"relatedVendorCves":197,"notableEvents":198},"CVE-2017-17688","What is CVE-2017-17688?","The OpenPGP specification allows a Cipher Feedback Mode (CFB) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL. NOTE: third parties report that this is a problem in applications that mishandle the Modification Detection Code (MDC) feature or accept an obsolete packet type, not a problem in the OpenPGP specification","The OpenPGP specification allows a Cipher Feedback Mode (CFB) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL. NOTE:...","2018-05-16T19:29:00.223","2024-08-05T21:15:34.56",5.9,"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":29,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","HIGH","NONE","UNCHANGED","MEDIUM",2.2,3.6,[30],{"Source":18,"Type":19,"CVSSData":31,"BaseSeverity":26,"ExploitabilityScore":36,"ImpactScore":37,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":32,"VectorString":33,"AccessVector":22,"AccessComplexity":26,"Authentication":24,"ConfidentialityImpact":34,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":35,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",4.3,8.6,2.9,0.05546,[38,38,38,38,38,38,38],"Medium",[42,47,51,54,58,62,66,71,75,79,82],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"apple","mail","-","cpe:2.3:a:apple:mail:-:*:*:*:*:*:*:*",{"vendor":48,"product":49,"version":45,"criteria":50,"vulnerable":4},"bloop","airmail","cpe:2.3:a:bloop:airmail:-:*:*:*:*:*:*:*",{"vendor":52,"product":52,"version":45,"criteria":53,"vulnerable":4},"emclient","cpe:2.3:a:emclient:emclient:-:*:*:*:*:*:*:*",{"vendor":55,"product":56,"version":45,"criteria":57,"vulnerable":4},"flipdogsolutions","maildroid","cpe:2.3:a:flipdogsolutions:maildroid:-:*:*:*:*:*:*:*",{"vendor":59,"product":60,"version":45,"criteria":61,"vulnerable":4},"freron","mailmate","cpe:2.3:a:freron:mailmate:-:*:*:*:*:*:*:*",{"vendor":63,"product":64,"version":45,"criteria":65,"vulnerable":4},"horde","horde_imp","cpe:2.3:a:horde:horde_imp:-:*:*:*:*:*:*:*",{"vendor":67,"product":68,"version":69,"criteria":70,"vulnerable":4},"microsoft","outlook","2007","cpe:2.3:a:microsoft:outlook:2007:*:*:*:*:*:*:*",{"vendor":72,"product":73,"version":45,"criteria":74,"vulnerable":4},"mozilla","thunderbird","cpe:2.3:a:mozilla:thunderbird:-:*:*:*:*:*:*:*",{"vendor":76,"product":77,"version":45,"criteria":78,"vulnerable":4},"postbox-inc","postbox","cpe:2.3:a:postbox-inc:postbox:-:*:*:*:*:*:*:*",{"vendor":80,"product":80,"version":45,"criteria":81,"vulnerable":4},"r2mail2","cpe:2.3:a:r2mail2:r2mail2:-:*:*:*:*:*:*:*",{"vendor":83,"product":84,"version":45,"criteria":85,"vulnerable":4},"roundcube","webmail","cpe:2.3:a:roundcube:webmail:-:*:*:*:*:*:*:*",11,[88,93,98,102,108,112,117,121,125,129],{"url":89,"source":90,"tags":91},"http:\u002F\u002Fflaked.sockpuppet.org\u002F2018\u002F05\u002F16\u002Fa-unified-timeline.html","Sockpuppet",[92],"Third Party Advisory",{"url":94,"source":95,"tags":96},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F104162","Securityfocus",[92,97],"VDB Entry",{"url":99,"source":100,"tags":101},"http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1040904","Securitytracker",[92,97],{"url":103,"source":104,"tags":105},"https:\u002F\u002Fefail.de","Efail",[106,107,92],"Exploit","Mitigation",{"url":109,"source":110,"tags":111},"https:\u002F\u002Flists.gnupg.org\u002Fpipermail\u002Fgnupg-users\u002F2018-May\u002F060334.html","Gnupg",[92],{"url":113,"source":114,"tags":115},"https:\u002F\u002Fnews.ycombinator.com\u002Fitem?id=17066419","Ycombinator",[116,92],"Issue Tracking",{"url":118,"source":119,"tags":120},"https:\u002F\u002Fprotonmail.com\u002Fblog\u002Fpgp-vulnerability-efail","Protonmail",[116,92],{"url":122,"source":123,"tags":124},"https:\u002F\u002Ftwitter.com\u002Fmatthew_d_green\u002Fstatus\u002F995996706457243648","Twitter",[92],{"url":126,"source":127,"tags":128},"https:\u002F\u002Fwww.patreon.com\u002Fposts\u002Fcybersecurity-15-18814817","Patreon",[116,92],{"url":130,"source":131,"tags":132},"https:\u002F\u002Fwww.synology.com\u002Fsupport\u002Fsecurity\u002FSynology_SA_18_22","Synology",[92],10,[135],{"id":136,"name":136,"description":137},"Unknown","NVD-CWE-noinfo",1,false,[],{"title":142,"metaDescription":143,"keywords":144,"canonicalUrl":145,"structuredData":146},"What is CVE-2017-17688? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2017-17688, a medium severity cyber security vulnerability from 2018. The OpenPGP specification allows a Cipher Feedback Mode (...","CVE-2017-17688, CVE-2017-17688 vulnerability, CVE-2017-17688 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, apple security, bloop security, emclient security, flipdogsolutions security, freron security, horde security, microsoft security, mozilla security","\u002Fwhat-is\u002Fcve-2017-17688",{"@context":147,"@type":148,"headline":142,"description":143,"datePublished":10,"dateModified":11,"author":149,"publisher":153,"about":157,"mainEntityOfPage":161,"articleSection":164,"keywords":165},"https:\u002F\u002Fschema.org","TechArticle",{"@type":150,"name":151,"url":152},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":150,"name":151,"url":152,"logo":154},{"@type":155,"url":156},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":158,"name":6,"description":159,"additionalType":160},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":162,"@id":163},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2017-17688","Cybersecurity","CVE-2017-17688, CVE-2017-17688 vulnerability, CVE-2017-17688 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[167],{"Operator":15,"Negate":15,"Nodes":168},[169],{"Operator":170,"Negate":15,"CPEMatch":171},"OR",[172,174,177,179,181,183,185,187,189,191,193,195],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":173,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"217117AE-C16C-4265-A9A9-152D06FCD64E",{"Vulnerable":4,"Criteria":175,"MatchCriteriaID":176,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:apple:mail:-:*:*:*:*:iphone_os:*:*","081D62F6-B751-4109-B10B-3CF9535B3C12",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":178,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"F389CED1-846A-4807-B8E7-00FBECAA41A0",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":180,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"930AFDDA-C32A-45E7-BA6E-5827E59B573B",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":182,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"ED2616EA-332D-4D6E-B66C-137A166E181D",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":184,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"2C26D918-1548-4A62-BC5C-72DF9168A34E",{"Vulnerable":4,"Criteria":65,"MatchCriteriaID":186,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"FDAD39AA-B9FD-492B-9BDA-57F74F4FABE5",{"Vulnerable":4,"Criteria":70,"MatchCriteriaID":188,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"D789259A-034E-40BB-9DFF-76B3104B212F",{"Vulnerable":4,"Criteria":74,"MatchCriteriaID":190,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"FF583CDC-DE9E-45AB-9861-CB203BFA8862",{"Vulnerable":4,"Criteria":78,"MatchCriteriaID":192,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"C0BA111F-A9FB-457D-818E-412195F9EA0A",{"Vulnerable":4,"Criteria":81,"MatchCriteriaID":194,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"19296516-EAD4-4B08-8D9A-5E853C7BEF58",{"Vulnerable":4,"Criteria":85,"MatchCriteriaID":196,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"5010756A-99B8-4C05-9DAC-9BE19B8B6373",[],[],{"lastModified":11,"cacheTime":200,"version":32},1792367736365,{"score":202,"band":40,"action":203,"scoredAt":204},44,"Plan remediation","2026-10-16T06:44:04.368506+00:00"]