The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL.

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7730-1 advisory.

    Damian Poddebniak, Christian Dresen, Jens Mller, Fabian Ising, Sebastian Schinzel, Simon Friedberger,     Juraj Somorovsky, and Jrg Schwenk discovered that PIM Messagelib could be made to leak the plaintext of     S/MIME encrypted emails when retrieving external content in emails. Under certain configurations, if a     user were tricked into opening a specially crafted email using an application linked against PIM     Messagelib, an attacker could possibly use this issue to obtain the plaintext of an encrypted email. This     update mitigates the issue by preventing automatic loading of external content. (CVE-2017-17689)

    Jens Mller, Marcus Brinkmann, Damian Poddebniak, Sebastian Schinzel, and Jrg Schwenk discovered that     PIM Messagelib could be made to leak the plaintext of S/MIME or PGP encrypted emails. If a user were     tricked into replying to a specially crafted email using an application linked against PIM Messagelib, an     attacker could possibly use this issue to obtain the plaintext of an encrypted email. (CVE-2019-10732)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7731-1 advisory.

    Damian Poddebniak, Christian Dresen, Jens Mller, Fabian Ising, Sebastian Schinzel, Simon Friedberger,     Juraj Somorovsky, and Jrg Schwenk discovered that KMail could be made to leak the plaintext of S/MIME     encrypted emails when retrieving external content in emails. Under certain configurations, if a user were     tricked into opening a specially crafted email, an attacker could possibly use this issue to obtain the     plaintext of an encrypted email. This update mitigates the issue by preventing KMail from automatically     loading external content. This issue only affected Ubuntu 18.04 LTS. (CVE-2017-17689)

    It was discovered that KMail could be made to attach files to an email without the user's knowledge. If a     user were tricked into sending an email created by a specially crafted mailto link, an attacker could     possibly use this issue to obtain sensitive files. (CVE-2020-11880)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7729-1 advisory.

    Damian Poddebniak, Christian Dresen, Jens Mller, Fabian Ising, Sebastian Schinzel, Simon Friedberger,     Juraj Somorovsky, and Jrg Schwenk discovered that the KMail application of KDE PIM could be made to leak     the plaintext of S/MIME encrypted emails when retrieving external content in emails. Under certain     configurations, if a user were tricked into opening a specially crafted email, an attacker could possibly     use this issue to obtain the plaintext of an encrypted email. This update mitigates the issue by     preventing KMail from automatically loading external content. (CVE-2017-17689)

    Jens Mller, Marcus Brinkmann, Damian Poddebniak, Sebastian Schinzel, and Jrg Schwenk discovered that     the KMail application of KDE PIM could be made to leak the plaintext of S/MIME or PGP encrypted emails. If     a user were tricked into replying to a specially crafted email, an attacker could possibly use this issue     to obtain the plaintext of an encrypted email. (CVE-2019-10732)

    It was discovered that the KMail application of KDE PIM could be made to attach files to an email without     the user's knowledge. If a user were tricked into sending an email created by a specially crafted mailto     link, an attacker could possibly use this issue to obtain sensitive files. This update mitigates the issue     by displaying a warning to the user when files are attached in this way. (CVE-2020-11880)

    It was discovered that the Account Wizard application of KDE PIM used HTTP rather than HTTPS when     retrieving certain email server configurations. An attacker could possibly use this issue to cause email     clients to use an attacker-controlled email server. This issue only affected Ubuntu 16.04 LTS.
    (CVE-2024-50624)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can     indirectly lead to plaintext exfiltration, aka EFAIL. (CVE-2017-17689)

Note that Nessus relies on the presence of the package as reported by the vendor.

This update for enigmail to version 2.0.5 fixes the following issues :

Improvements on previous fixes on CVE-2017-17688, boo#1093151 and CVE-2017-17689, boo#1093152 (EFAIL) :

  - do not decrypt MIME parts unnecessarily 

  - improve Error Message for Missing Message Modification     Code

This update for enigmail fixes multiple issues.

Security issues fixed :

  - CVE-2017-17688: CFB gadget attacks allowed to exfiltrate     plaintext out of encrypted emails. enigmail now fails on     GnuPG integrity check warnings for old Algorithms     (bsc#1093151)

  - CVE-2017-17689: CBC gadget attacks allows to exfiltrate     plaintext out of encrypted emails (bsc#1093152)

This update for enigmail to version 2.0.4 fixes multiple issues.

Security issues fixed :

  - CVE-2017-17688: CFB gadget attacks allowed to exfiltrate     plaintext out of encrypted emails. enigmail now fails on     GnuPG integrity check warnings for old Algorithms     (bsc#1093151)

  - CVE-2017-17689: CBC gadget attacks allows to exfiltrate     plaintext out of encrypted emails (bsc#1093152)

This update also includes new and updated functionality :

  - The Encryption and Signing buttons now work for both     OpenPGP and S/MIME. Enigmail will chose between S/MIME     or OpenPGP depending on whether the keys for all     recipients are available for the respective standard

  - Support for the Autocrypt standard, which is now enabled     by default

  - Support for Pretty Easy Privacy (p&equiv;p)

  - Support for Web Key Directory (WKD)

  - The message subject can now be encrypted and replaced     with a dummy subject, following the Memory Hole standard     forprotected Email Headers

  - keys on keyring are automatically refreshed from     keyservers at irregular intervals

  - Subsequent updates of Enigmail no longer require a     restart of Thunderbird 

  - Keys are internally addressed using the fingerprint     instead of the key ID

ID	Name	Product	Family	Severity
261432	Ubuntu 18.04 LTS : PIM Messagelib vulnerabilities (USN-7730-1)	Nessus	Ubuntu Local Security Checks	medium
261431	Ubuntu 18.04 LTS / 20.04 LTS : KMail vulnerabilities (USN-7731-1)	Nessus	Ubuntu Local Security Checks	medium
261427	Ubuntu 14.04 LTS / 16.04 LTS : KDE PIM vulnerabilities (USN-7729-1)	Nessus	Ubuntu Local Security Checks	medium
220871	Linux Distros Unpatched Vulnerability : CVE-2017-17689	Nessus	Misc.	medium
123173	openSUSE Security Update : enigmail (openSUSE-2019-395) (EFAIL)	Nessus	SuSE Local Security Checks	medium
123172	openSUSE Security Update : enigmail (openSUSE-2019-368) (EFAIL)	Nessus	SuSE Local Security Checks	medium
110068	openSUSE Security Update : enigmail (openSUSE-2018-495) (EFAIL)	Nessus	SuSE Local Security Checks	medium
109933	openSUSE Security Update : enigmail (openSUSE-2018-474) (EFAIL)	Nessus	SuSE Local Security Checks	medium
109904	openSUSE Security Update : enigmail (openSUSE-2018-470) (EFAIL)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2017-17689

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium