DeutschShown in its original language — a full translation is planned for a future version.
S/MIME und OpenPGP verschlüsselten Mails: Schwachstelle ermöglicht Entschlüsselung
view advisory published 2018-05-14
Ein entfernter, anonymer Angreifer kann eine Schwachstellen in S/MIME und OpenPGP verschlüsselten Mails ausnutzen, um Sicherheitsvorkehrungen zu umgehen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-17689US | medium5.9 | — | ||
The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL. | ||||
| CVE-2017-17688US | medium5.9 | — | ||
The OpenPGP specification allows a Cipher Feedback Mode (CFB) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL. NOTE: third parties report t… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan