CVE-2017-9604 Information disclosure in n/a

What is CVE-2017-9604?

CVE-2017-9604 is a high-severity vulnerability in n/a, published on 13 Jun 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

KDE kmail before 5.5.2 and messagelib before 5.5.2, as distributed in KDE Applications before 17.04.2, do not ensure that a plugin's sign/encrypt action occurs during use of the Send Later feature, which allows remote attackers to obtain sensitive information by sniffing the network.

Weakness: CWE-311

Which versions are affected by CVE-2017-9604?

It affects 2 products.

Products include Kde Kmail, Kde Messagelib.

How do I fix CVE-2017-9604?

Upgrade to a fixed version.

Is CVE-2017-9604 being exploited?

There is no known exploitation of CVE-2017-9604 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2016-7967 Code injection in n/a High 8.1
• CVE-2020-11880 Path traversal in n/a Medium 6.5
• CVE-2016-7968 Cross-site scripting in n/a Medium 6.5
• CVE-2014-8878 Weak cryptography in n/a Medium 5.9
• CVE-2021-38373 Security feature bypass in n/a Medium 5.3

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2017-9604, GHSA-7w32-mxrp-49jg, UBUNTU-CVE-2017-9604, openSUSE-SU-2017:1748-1, openSUSE-SU-2017:1756-1.