CVE-2017-9604 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2017-9604 Interim 1 24 2023-02-10T02:15:04Z current 2021-05-30T13:57:25Z 2023-02-10T02:15:04Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2017-9604 KDE kmail before 5.5.2 and messagelib before 5.5.2, as distributed in KDE Applications before 17.04.2, do not ensure that a plugin's sign/encrypt action occurs during use of the Send Later feature, which allows remote attackers to obtain sensitive information by sniffing the network. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/opensuse-updates/2017-07/msg00002.html E-Mail link for openSUSE-SU-2017:1748-1 https://lists.opensuse.org/opensuse-updates/2017-07/msg00003.html E-Mail link for openSUSE-SU-2017:1749-1 https://lists.opensuse.org/opensuse-updates/2017-07/msg00010.html E-Mail link for openSUSE-SU-2017:1756-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Package Hub 12 SP2 akonadi_resources-16.08.2-5.2 akregator5-16.08.2-5.2 blogilo5-16.08.2-5.2 kaddressbook5-16.08.2-5.2 kalarm5-16.08.2-5.2 kdepim-16.08.2-5.2 kdepim3 kdepim3-devel kmail5-16.08.2-5.2 knotes5-16.08.2-5.2 kontact5-16.08.2-5.2 korganizer5-16.08.2-5.2 ktnef5-16.08.2-5.2 libkcal libkcal-devel libkcal2 libkmime-devel libkmime2 libktnef-devel libktnef1 messagelib-16.08.2-5.1 messagelib-devel-16.08.2-5.1 akonadi_resources-16.08.2-5.2 as a component of SUSE Package Hub 12 SP2 akregator5-16.08.2-5.2 as a component of SUSE Package Hub 12 SP2 blogilo5-16.08.2-5.2 as a component of SUSE Package Hub 12 SP2 kaddressbook5-16.08.2-5.2 as a component of SUSE Package Hub 12 SP2 kalarm5-16.08.2-5.2 as a component of SUSE Package Hub 12 SP2 kdepim-16.08.2-5.2 as a component of SUSE Package Hub 12 SP2 kmail5-16.08.2-5.2 as a component of SUSE Package Hub 12 SP2 knotes5-16.08.2-5.2 as a component of SUSE Package Hub 12 SP2 kontact5-16.08.2-5.2 as a component of SUSE Package Hub 12 SP2 korganizer5-16.08.2-5.2 as a component of SUSE Package Hub 12 SP2 ktnef5-16.08.2-5.2 as a component of SUSE Package Hub 12 SP2 messagelib-16.08.2-5.1 as a component of SUSE Package Hub 12 SP2 messagelib-devel-16.08.2-5.1 as a component of SUSE Package Hub 12 SP2 kdepim3 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 kdepim3-devel as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libkcal as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libkcal-devel as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libkcal2 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libkmime-devel as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libkmime2 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libktnef-devel as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libktnef1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 KDE kmail before 5.5.2 and messagelib before 5.5.2, as distributed in KDE Applications before 17.04.2, do not ensure that a plugin's sign/encrypt action occurs during use of the Send Later feature, which allows remote attackers to obtain sensitive information by sniffing the network. CVE-2017-9604 SUSE Package Hub 12 SP2:akonadi_resources-16.08.2-5.2 SUSE Package Hub 12 SP2:akregator5-16.08.2-5.2 SUSE Package Hub 12 SP2:blogilo5-16.08.2-5.2 SUSE Package Hub 12 SP2:kaddressbook5-16.08.2-5.2 SUSE Package Hub 12 SP2:kalarm5-16.08.2-5.2 SUSE Package Hub 12 SP2:kdepim-16.08.2-5.2 SUSE Package Hub 12 SP2:kmail5-16.08.2-5.2 SUSE Package Hub 12 SP2:knotes5-16.08.2-5.2 SUSE Package Hub 12 SP2:kontact5-16.08.2-5.2 SUSE Package Hub 12 SP2:korganizer5-16.08.2-5.2 SUSE Package Hub 12 SP2:ktnef5-16.08.2-5.2 SUSE Package Hub 12 SP2:messagelib-16.08.2-5.1 SUSE Package Hub 12 SP2:messagelib-devel-16.08.2-5.1 SUSE Linux Enterprise Software Development Kit 11 SP4:kdepim3 SUSE Linux Enterprise Software Development Kit 11 SP4:kdepim3-devel SUSE Linux Enterprise Software Development Kit 11 SP4:libkcal SUSE Linux Enterprise Software Development Kit 11 SP4:libkcal-devel SUSE Linux Enterprise Software Development Kit 11 SP4:libkcal2 SUSE Linux Enterprise Software Development Kit 11 SP4:libkmime-devel SUSE Linux Enterprise Software Development Kit 11 SP4:libkmime2 SUSE Linux Enterprise Software Development Kit 11 SP4:libktnef-devel SUSE Linux Enterprise Software Development Kit 11 SP4:libktnef1 moderate 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N 6.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N