[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fKGPxmyezWdPX1_thPSEFmuybOOB1vhsESMHQzGMgJsw":3,"g5a-risk:CVE-2017-17689":236},{"success":4,"data":5,"meta":234},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":37,"epssPercentile":14,"epssTimeSeries":38,"severity":41,"affectedProducts":42,"affectedProductsCount":119,"references":120,"referencesCount":150,"weaknesses":151,"weaknessesCount":155,"isActivelyExploited":156,"cisaInfo":14,"otxData":14,"relatedBlogPosts":157,"seoMetadata":158,"configurations":183,"relatedVendorCves":232,"notableEvents":233},"CVE-2017-17689","What is CVE-2017-17689?","The S\u002FMIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL.","2018-05-16T19:29:00.303","2019-10-03T00:03:26.223",5.9,"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":14,"CVSSMetricV30":15,"CVSSMetricV2":28,"CVSSMetricV40":14},null,[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":20,"VectorString":12,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":11,"BaseSeverity":25,"ExploitCodeMaturity":14,"RemediationLevel":14,"ReportConfidence":14,"TemporalScore":14,"TemporalSeverity":14,"ConfidentialityRequirement":14,"IntegrityRequirement":14,"AvailabilityRequirement":14,"ModifiedAttackVector":14,"ModifiedAttackComplexity":14,"ModifiedPrivilegesRequired":14,"ModifiedUserInteraction":14,"ModifiedScope":14,"ModifiedConfidentialityImpact":14,"ModifiedIntegrityImpact":14,"ModifiedAvailabilityImpact":14,"EnvironmentalScore":14,"EnvironmentalSeverity":14},"3.0","NETWORK","HIGH","NONE","UNCHANGED","MEDIUM",2.2,3.6,[29],{"Source":17,"Type":18,"CVSSData":30,"BaseSeverity":25,"ExploitabilityScore":35,"ImpactScore":36,"ACInsufInfo":14,"ObtainAllPrivilege":14,"ObtainUserPrivilege":14,"ObtainOtherPrivilege":14,"UserInteractionRequired":14},{"Version":31,"VectorString":32,"AccessVector":21,"AccessComplexity":25,"Authentication":23,"ConfidentialityImpact":33,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":34,"BaseSeverity":14,"Exploitability":14,"RemediationLevel":14,"ReportConfidence":14,"TemporalScore":14,"CollateralDamagePotential":14,"TargetDistribution":14,"ConfidentialityRequirement":14,"IntegrityRequirement":14,"AvailabilityRequirement":14,"EnvironmentalScore":14},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",4.3,8.6,2.9,0.04222,[39,40,37,37,37,37,37],0.04133,0.04301,"Medium",[43,48,52,56,59,63,67,71,75,79,83,87,90,95,98,101,104,108,112,115],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"9folders","nine","-","cpe:2.3:a:9folders:nine:-:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":46,"criteria":51,"vulnerable":4},"apple","mail","cpe:2.3:a:apple:mail:-:*:*:*:*:*:*:*",{"vendor":53,"product":54,"version":46,"criteria":55,"vulnerable":4},"bloop","airmail","cpe:2.3:a:bloop:airmail:-:*:*:*:*:*:*:*",{"vendor":57,"product":57,"version":46,"criteria":58,"vulnerable":4},"emclient","cpe:2.3:a:emclient:emclient:-:*:*:*:*:*:*:*",{"vendor":60,"product":61,"version":46,"criteria":62,"vulnerable":4},"flipdogsolutions","maildroid","cpe:2.3:a:flipdogsolutions:maildroid:-:*:*:*:*:*:*:*",{"vendor":64,"product":65,"version":46,"criteria":66,"vulnerable":4},"freron","mailmate","cpe:2.3:a:freron:mailmate:-:*:*:*:*:*:*:*",{"vendor":68,"product":69,"version":46,"criteria":70,"vulnerable":4},"gnome","evolution","cpe:2.3:a:gnome:evolution:-:*:*:*:*:*:*:*",{"vendor":72,"product":73,"version":46,"criteria":74,"vulnerable":4},"google","gmail","cpe:2.3:a:google:gmail:-:*:*:*:*:*:*:*",{"vendor":76,"product":77,"version":46,"criteria":78,"vulnerable":4},"horde","horde_imp","cpe:2.3:a:horde:horde_imp:-:*:*:*:*:*:*:*",{"vendor":80,"product":81,"version":46,"criteria":82,"vulnerable":4},"ibm","notes","cpe:2.3:a:ibm:notes:-:*:*:*:*:*:*:*",{"vendor":84,"product":85,"version":46,"criteria":86,"vulnerable":4},"kde","kmail","cpe:2.3:a:kde:kmail:-:*:*:*:*:*:*:*",{"vendor":84,"product":88,"version":46,"criteria":89,"vulnerable":4},"trojita","cpe:2.3:a:kde:trojita:-:*:*:*:*:*:*:*",{"vendor":91,"product":92,"version":93,"criteria":94,"vulnerable":4},"microsoft","outlook","2007","cpe:2.3:a:microsoft:outlook:2007:*:*:*:*:*:*:*",{"vendor":91,"product":92,"version":96,"criteria":97,"vulnerable":4},"2010","cpe:2.3:a:microsoft:outlook:2010:*:*:*:*:*:*:*",{"vendor":91,"product":92,"version":99,"criteria":100,"vulnerable":4},"2013","cpe:2.3:a:microsoft:outlook:2013:*:*:*:*:*:*:*",{"vendor":91,"product":92,"version":102,"criteria":103,"vulnerable":4},"2016","cpe:2.3:a:microsoft:outlook:2016:*:*:*:*:*:*:*",{"vendor":105,"product":106,"version":46,"criteria":107,"vulnerable":4},"mozilla","thunderbird","cpe:2.3:a:mozilla:thunderbird:-:*:*:*:*:*:*:*",{"vendor":109,"product":110,"version":46,"criteria":111,"vulnerable":4},"postbox-inc","postbox","cpe:2.3:a:postbox-inc:postbox:-:*:*:*:*:*:*:*",{"vendor":113,"product":113,"version":46,"criteria":114,"vulnerable":4},"r2mail2","cpe:2.3:a:r2mail2:r2mail2:-:*:*:*:*:*:*:*",{"vendor":116,"product":117,"version":46,"criteria":118,"vulnerable":4},"ritlabs","the_bat","cpe:2.3:a:ritlabs:the_bat:-:*:*:*:*:*:*:*",20,[121,127,133,138,142,146],{"url":122,"source":123,"tags":124},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F104165","Securityfocus",[125,126],"Third Party Advisory","VDB Entry",{"url":128,"source":129,"tags":130},"https:\u002F\u002Fefail.de","Efail",[131,132,125],"Exploit","Mitigation",{"url":134,"source":135,"tags":136},"https:\u002F\u002Fnews.ycombinator.com\u002Fitem?id=17066419","Ycombinator",[137,125],"Issue Tracking",{"url":139,"source":140,"tags":141},"https:\u002F\u002Fpastebin.com\u002FgNCc8aYm","Pastebin",[125],{"url":143,"source":144,"tags":145},"https:\u002F\u002Ftwitter.com\u002Fmatthew_d_green\u002Fstatus\u002F996371541591019520","Twitter",[125],{"url":147,"source":148,"tags":149},"https:\u002F\u002Fwww.synology.com\u002Fsupport\u002Fsecurity\u002FSynology_SA_18_22","Synology",[125],6,[152],{"id":153,"name":153,"description":154},"Unknown","NVD-CWE-noinfo",1,false,[],{"title":159,"metaDescription":160,"keywords":161,"canonicalUrl":162,"structuredData":163},"What is CVE-2017-17689? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2017-17689, a medium severity cyber security vulnerability from 2018. The S\u002FMIME specification allows a Cipher Block Chaining (...","CVE-2017-17689, CVE-2017-17689 vulnerability, CVE-2017-17689 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, 9folders security, apple security, bloop security, emclient security, flipdogsolutions security, freron security, gnome security, google security","\u002Fwhat-is\u002Fcve-2017-17689",{"@context":164,"@type":165,"headline":159,"description":160,"datePublished":9,"dateModified":10,"author":166,"publisher":170,"about":174,"mainEntityOfPage":178,"articleSection":181,"keywords":182},"https:\u002F\u002Fschema.org","TechArticle",{"@type":167,"name":168,"url":169},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":167,"name":168,"url":169,"logo":171},{"@type":172,"url":173},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":175,"name":6,"description":176,"additionalType":177},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":179,"@id":180},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2017-17689","Cybersecurity","CVE-2017-17689, CVE-2017-17689 vulnerability, CVE-2017-17689 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[184],{"Operator":14,"Negate":14,"Nodes":185},[186],{"Operator":187,"Negate":14,"CPEMatch":188},"OR",[189,191,193,196,198,200,202,204,206,208,210,212,214,216,218,220,222,224,226,228,230],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":190,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":14},"8EE489EA-2250-4BF0-800C-EDA6EA7D6AAE",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":192,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":14},"217117AE-C16C-4265-A9A9-152D06FCD64E",{"Vulnerable":4,"Criteria":194,"MatchCriteriaID":195,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":14},"cpe:2.3:a:apple:mail:-:*:*:*:*:iphone_os:*:*","081D62F6-B751-4109-B10B-3CF9535B3C12",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":197,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":14},"F389CED1-846A-4807-B8E7-00FBECAA41A0",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":199,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":14},"930AFDDA-C32A-45E7-BA6E-5827E59B573B",{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":201,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":14},"ED2616EA-332D-4D6E-B66C-137A166E181D",{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":203,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":14},"2C26D918-1548-4A62-BC5C-72DF9168A34E",{"Vulnerable":4,"Criteria":70,"MatchCriteriaID":205,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":14},"38B06B0D-E60A-4B61-9E39-F5116C8F22A1",{"Vulnerable":4,"Criteria":74,"MatchCriteriaID":207,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":14},"C671802A-2362-4E66-B5D5-079E5E6B89A5",{"Vulnerable":4,"Criteria":78,"MatchCriteriaID":209,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":14},"FDAD39AA-B9FD-492B-9BDA-57F74F4FABE5",{"Vulnerable":4,"Criteria":82,"MatchCriteriaID":211,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":14},"91669C83-56A0-4087-8B6D-2012EB0AE9D3",{"Vulnerable":4,"Criteria":86,"MatchCriteriaID":213,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":14},"9F01C924-2AE4-4214-9139-ED08293D198C",{"Vulnerable":4,"Criteria":89,"MatchCriteriaID":215,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":14},"93076D12-C4AD-4DE8-A76C-9819493FF516",{"Vulnerable":4,"Criteria":94,"MatchCriteriaID":217,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":14},"D789259A-034E-40BB-9DFF-76B3104B212F",{"Vulnerable":4,"Criteria":97,"MatchCriteriaID":219,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":14},"3A009EAF-41A1-4E6D-B1EB-A2DACE197A43",{"Vulnerable":4,"Criteria":100,"MatchCriteriaID":221,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":14},"3CD3770E-9513-43B2-BC9E-0CA3F63D59FB",{"Vulnerable":4,"Criteria":103,"MatchCriteriaID":223,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":14},"E2B1657C-0FF4-461A-BE2A-641275C4B0A0",{"Vulnerable":4,"Criteria":107,"MatchCriteriaID":225,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":14},"FF583CDC-DE9E-45AB-9861-CB203BFA8862",{"Vulnerable":4,"Criteria":111,"MatchCriteriaID":227,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":14},"C0BA111F-A9FB-457D-818E-412195F9EA0A",{"Vulnerable":4,"Criteria":114,"MatchCriteriaID":229,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":14},"19296516-EAD4-4B08-8D9A-5E853C7BEF58",{"Vulnerable":4,"Criteria":118,"MatchCriteriaID":231,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":14},"48A3CC49-2FAC-40C9-9CDA-E4440577205E",[],[],{"lastModified":10,"cacheTime":235,"version":31},1792352576258,{"score":237,"band":41,"action":238,"scoredAt":239},46,"Plan remediation","2026-10-16T06:44:04.368821+00:00"]