This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2017-9604 →

DEBIAN-CVE-2017-9604

KDE kmail before 5.5.2 and messagelib before 5.5.2, as distributed in KDE Applications before 17.04.2, do not ensure that a plugin's sign/encrypt acti...

Original description

The description as published by the source.

KDE kmail before 5.5.2 and messagelib before 5.5.2, as distributed in KDE Applications before 17.04.2, do not ensure that a plugin's sign/encrypt action occurs during use of the Send Later feature, which allows remote attackers to obtain sensitive information by sniffing the network.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 kf5-messagelib

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:16.04.3-3"}]}]

References

advisory security-tracker.debian.org