U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Vulnerability Change Records for CVE-2017-17688

Change History

Initial Analysis by NIST 6/27/2018 1:56:19 PM

Action Type Old Value New Value
Added CPE Configuration

								
							
							
						
OR
     *cpe:2.3:a:apple:mail:-:*:*:*:*:*:*:*
     *cpe:2.3:a:apple:mail:-:*:*:*:*:iphone_os:*:*
     *cpe:2.3:a:bloop:airmail:-:*:*:*:*:*:*:*
     *cpe:2.3:a:emclient:emclient:-:*:*:*:*:*:*:*
     *cpe:2.3:a:flipdogsolutions:maildroid:-:*:*:*:*:*:*:*
     *cpe:2.3:a:freron:mailmate:-:*:*:*:*:*:*:*
     *cpe:2.3:a:horde:horde_imp:-:*:*:*:*:*:*:*
     *cpe:2.3:a:microsoft:outlook:2007:*:*:*:*:*:*:*
     *cpe:2.3:a:mozilla:thunderbird:-:*:*:*:*:*:*:*
     *cpe:2.3:a:postbox-inc:postbox:-:*:*:*:*:*:*:*
     *cpe:2.3:a:r2mail2:r2mail2:-:*:*:*:*:*:*:*
     *cpe:2.3:a:roundcube:webmail:-:*:*:*:*:*:*:*
Added CVSS V2

								
							
							
						
(AV:N/AC:M/Au:N/C:P/I:N/A:N)
Added CVSS V3

								
							
							
						
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Added CWE

								
							
							
						
CWE-310
Changed Reference Type
http://flaked.sockpuppet.org/2018/05/16/a-unified-timeline.html No Types Assigned
http://flaked.sockpuppet.org/2018/05/16/a-unified-timeline.html Third Party Advisory
Changed Reference Type
http://www.securityfocus.com/bid/104162 No Types Assigned
http://www.securityfocus.com/bid/104162 Third Party Advisory, VDB Entry
Changed Reference Type
http://www.securitytracker.com/id/1040904 No Types Assigned
http://www.securitytracker.com/id/1040904 Third Party Advisory, VDB Entry
Changed Reference Type
https://efail.de No Types Assigned
https://efail.de Exploit, Mitigation, Third Party Advisory
Changed Reference Type
https://lists.gnupg.org/pipermail/gnupg-users/2018-May/060334.html No Types Assigned
https://lists.gnupg.org/pipermail/gnupg-users/2018-May/060334.html Third Party Advisory
Changed Reference Type
https://news.ycombinator.com/item?id=17066419 No Types Assigned
https://news.ycombinator.com/item?id=17066419 Issue Tracking, Third Party Advisory
Changed Reference Type
https://protonmail.com/blog/pgp-vulnerability-efail No Types Assigned
https://protonmail.com/blog/pgp-vulnerability-efail Issue Tracking, Third Party Advisory
Changed Reference Type
https://twitter.com/matthew_d_green/status/995996706457243648 No Types Assigned
https://twitter.com/matthew_d_green/status/995996706457243648 Third Party Advisory
Changed Reference Type
https://www.patreon.com/posts/cybersecurity-15-18814817 No Types Assigned
https://www.patreon.com/posts/cybersecurity-15-18814817 Issue Tracking, Third Party Advisory
Changed Reference Type
https://www.synology.com/support/security/Synology_SA_18_22 No Types Assigned
https://www.synology.com/support/security/Synology_SA_18_22 Third Party Advisory