[ALPINE:CVE-2021-38502] thunderbird vulnerability

Severity Medium
Affected Packages 29
Fixed Packages 29
CVEs 1

[From CVE-2021-38502] Thunderbird ignored the configuration to require STARTTLS security for an SMTP connection. A MITM could perform a downgrade attack to intercept transmitted messages, or could take control of the authenticated session to execute SMTP commands chosen by the MITM. If an unprotected authentication method was configured, the MITM could obtain the authentication credentials, too. This vulnerability affects Thunderbird < 91.2.

Package Affected Version
pkg:apk/alpine/thunderbird?arch=x86_64&distro=alpine-edge < 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=x86_64&distro=alpine-3.18 < 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=x86_64&distro=alpine-3.17 < 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=x86_64&distro=alpine-3.16 < 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=x86&distro=alpine-edge < 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=x86&distro=alpine-3.18 < 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=x86&distro=alpine-3.17 < 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=x86&distro=alpine-3.16 < 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=s390x&distro=alpine-edge < 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=s390x&distro=alpine-3.18 < 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=s390x&distro=alpine-3.17 < 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=s390x&distro=alpine-3.16 < 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=riscv64&distro=alpine-edge < 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=ppc64le&distro=alpine-edge < 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=ppc64le&distro=alpine-3.18 < 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=ppc64le&distro=alpine-3.17 < 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=ppc64le&distro=alpine-3.16 < 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=armv7&distro=alpine-edge < 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=armv7&distro=alpine-3.18 < 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=armv7&distro=alpine-3.17 < 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=armv7&distro=alpine-3.16 < 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=armhf&distro=alpine-edge < 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=armhf&distro=alpine-3.18 < 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=armhf&distro=alpine-3.17 < 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=armhf&distro=alpine-3.16 < 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=aarch64&distro=alpine-edge < 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=aarch64&distro=alpine-3.18 < 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=aarch64&distro=alpine-3.17 < 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=aarch64&distro=alpine-3.16 < 91.3.2-r0
Package Fixed Version
pkg:apk/alpine/thunderbird?arch=x86_64&distro=alpine-edge = 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=x86_64&distro=alpine-3.18 = 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=x86_64&distro=alpine-3.17 = 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=x86_64&distro=alpine-3.16 = 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=x86&distro=alpine-edge = 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=x86&distro=alpine-3.18 = 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=x86&distro=alpine-3.17 = 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=x86&distro=alpine-3.16 = 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=s390x&distro=alpine-edge = 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=s390x&distro=alpine-3.18 = 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=s390x&distro=alpine-3.17 = 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=s390x&distro=alpine-3.16 = 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=riscv64&distro=alpine-edge = 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=ppc64le&distro=alpine-edge = 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=ppc64le&distro=alpine-3.18 = 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=ppc64le&distro=alpine-3.17 = 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=ppc64le&distro=alpine-3.16 = 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=armv7&distro=alpine-edge = 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=armv7&distro=alpine-3.18 = 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=armv7&distro=alpine-3.17 = 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=armv7&distro=alpine-3.16 = 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=armhf&distro=alpine-edge = 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=armhf&distro=alpine-3.18 = 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=armhf&distro=alpine-3.17 = 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=armhf&distro=alpine-3.16 = 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=aarch64&distro=alpine-edge = 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=aarch64&distro=alpine-3.18 = 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=aarch64&distro=alpine-3.17 = 91.3.2-r0
pkg:apk/alpine/thunderbird?arch=aarch64&distro=alpine-3.16 = 91.3.2-r0
ID
ALPINE:CVE-2021-38502
Severity
medium
URL
https://security.alpinelinux.org/vuln/CVE-2021-38502
Published
2021-11-03T01:15:07
(2 years ago)
Modified
2021-11-03T01:15:07
(2 years ago)
Rights
Alpine Linux Security Team
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Fixed pkg:apk/alpine/thunderbird?arch=x86_64&distro=alpine-edge alpine thunderbird = 91.3.2-r0 alpine-edge x86_64
Affected pkg:apk/alpine/thunderbird?arch=x86_64&distro=alpine-edge alpine thunderbird < 91.3.2-r0 alpine-edge x86_64
Fixed pkg:apk/alpine/thunderbird?arch=x86_64&distro=alpine-3.18 alpine thunderbird = 91.3.2-r0 alpine-3.18 x86_64
Affected pkg:apk/alpine/thunderbird?arch=x86_64&distro=alpine-3.18 alpine thunderbird < 91.3.2-r0 alpine-3.18 x86_64
Fixed pkg:apk/alpine/thunderbird?arch=x86_64&distro=alpine-3.17 alpine thunderbird = 91.3.2-r0 alpine-3.17 x86_64
Affected pkg:apk/alpine/thunderbird?arch=x86_64&distro=alpine-3.17 alpine thunderbird < 91.3.2-r0 alpine-3.17 x86_64
Fixed pkg:apk/alpine/thunderbird?arch=x86_64&distro=alpine-3.16 alpine thunderbird = 91.3.2-r0 alpine-3.16 x86_64
Affected pkg:apk/alpine/thunderbird?arch=x86_64&distro=alpine-3.16 alpine thunderbird < 91.3.2-r0 alpine-3.16 x86_64
Fixed pkg:apk/alpine/thunderbird?arch=x86&distro=alpine-edge alpine thunderbird = 91.3.2-r0 alpine-edge x86
Affected pkg:apk/alpine/thunderbird?arch=x86&distro=alpine-edge alpine thunderbird < 91.3.2-r0 alpine-edge x86
Fixed pkg:apk/alpine/thunderbird?arch=x86&distro=alpine-3.18 alpine thunderbird = 91.3.2-r0 alpine-3.18 x86
Affected pkg:apk/alpine/thunderbird?arch=x86&distro=alpine-3.18 alpine thunderbird < 91.3.2-r0 alpine-3.18 x86
Fixed pkg:apk/alpine/thunderbird?arch=x86&distro=alpine-3.17 alpine thunderbird = 91.3.2-r0 alpine-3.17 x86
Affected pkg:apk/alpine/thunderbird?arch=x86&distro=alpine-3.17 alpine thunderbird < 91.3.2-r0 alpine-3.17 x86
Fixed pkg:apk/alpine/thunderbird?arch=x86&distro=alpine-3.16 alpine thunderbird = 91.3.2-r0 alpine-3.16 x86
Affected pkg:apk/alpine/thunderbird?arch=x86&distro=alpine-3.16 alpine thunderbird < 91.3.2-r0 alpine-3.16 x86
Fixed pkg:apk/alpine/thunderbird?arch=s390x&distro=alpine-edge alpine thunderbird = 91.3.2-r0 alpine-edge s390x
Affected pkg:apk/alpine/thunderbird?arch=s390x&distro=alpine-edge alpine thunderbird < 91.3.2-r0 alpine-edge s390x
Fixed pkg:apk/alpine/thunderbird?arch=s390x&distro=alpine-3.18 alpine thunderbird = 91.3.2-r0 alpine-3.18 s390x
Affected pkg:apk/alpine/thunderbird?arch=s390x&distro=alpine-3.18 alpine thunderbird < 91.3.2-r0 alpine-3.18 s390x
Fixed pkg:apk/alpine/thunderbird?arch=s390x&distro=alpine-3.17 alpine thunderbird = 91.3.2-r0 alpine-3.17 s390x
Affected pkg:apk/alpine/thunderbird?arch=s390x&distro=alpine-3.17 alpine thunderbird < 91.3.2-r0 alpine-3.17 s390x
Fixed pkg:apk/alpine/thunderbird?arch=s390x&distro=alpine-3.16 alpine thunderbird = 91.3.2-r0 alpine-3.16 s390x
Affected pkg:apk/alpine/thunderbird?arch=s390x&distro=alpine-3.16 alpine thunderbird < 91.3.2-r0 alpine-3.16 s390x
Fixed pkg:apk/alpine/thunderbird?arch=riscv64&distro=alpine-edge alpine thunderbird = 91.3.2-r0 alpine-edge riscv64
Affected pkg:apk/alpine/thunderbird?arch=riscv64&distro=alpine-edge alpine thunderbird < 91.3.2-r0 alpine-edge riscv64
Fixed pkg:apk/alpine/thunderbird?arch=ppc64le&distro=alpine-edge alpine thunderbird = 91.3.2-r0 alpine-edge ppc64le
Affected pkg:apk/alpine/thunderbird?arch=ppc64le&distro=alpine-edge alpine thunderbird < 91.3.2-r0 alpine-edge ppc64le
Fixed pkg:apk/alpine/thunderbird?arch=ppc64le&distro=alpine-3.18 alpine thunderbird = 91.3.2-r0 alpine-3.18 ppc64le
Affected pkg:apk/alpine/thunderbird?arch=ppc64le&distro=alpine-3.18 alpine thunderbird < 91.3.2-r0 alpine-3.18 ppc64le
Fixed pkg:apk/alpine/thunderbird?arch=ppc64le&distro=alpine-3.17 alpine thunderbird = 91.3.2-r0 alpine-3.17 ppc64le
Affected pkg:apk/alpine/thunderbird?arch=ppc64le&distro=alpine-3.17 alpine thunderbird < 91.3.2-r0 alpine-3.17 ppc64le
Fixed pkg:apk/alpine/thunderbird?arch=ppc64le&distro=alpine-3.16 alpine thunderbird = 91.3.2-r0 alpine-3.16 ppc64le
Affected pkg:apk/alpine/thunderbird?arch=ppc64le&distro=alpine-3.16 alpine thunderbird < 91.3.2-r0 alpine-3.16 ppc64le
Fixed pkg:apk/alpine/thunderbird?arch=armv7&distro=alpine-edge alpine thunderbird = 91.3.2-r0 alpine-edge armv7
Affected pkg:apk/alpine/thunderbird?arch=armv7&distro=alpine-edge alpine thunderbird < 91.3.2-r0 alpine-edge armv7
Fixed pkg:apk/alpine/thunderbird?arch=armv7&distro=alpine-3.18 alpine thunderbird = 91.3.2-r0 alpine-3.18 armv7
Affected pkg:apk/alpine/thunderbird?arch=armv7&distro=alpine-3.18 alpine thunderbird < 91.3.2-r0 alpine-3.18 armv7
Fixed pkg:apk/alpine/thunderbird?arch=armv7&distro=alpine-3.17 alpine thunderbird = 91.3.2-r0 alpine-3.17 armv7
Affected pkg:apk/alpine/thunderbird?arch=armv7&distro=alpine-3.17 alpine thunderbird < 91.3.2-r0 alpine-3.17 armv7
Fixed pkg:apk/alpine/thunderbird?arch=armv7&distro=alpine-3.16 alpine thunderbird = 91.3.2-r0 alpine-3.16 armv7
Affected pkg:apk/alpine/thunderbird?arch=armv7&distro=alpine-3.16 alpine thunderbird < 91.3.2-r0 alpine-3.16 armv7
Fixed pkg:apk/alpine/thunderbird?arch=armhf&distro=alpine-edge alpine thunderbird = 91.3.2-r0 alpine-edge armhf
Affected pkg:apk/alpine/thunderbird?arch=armhf&distro=alpine-edge alpine thunderbird < 91.3.2-r0 alpine-edge armhf
Fixed pkg:apk/alpine/thunderbird?arch=armhf&distro=alpine-3.18 alpine thunderbird = 91.3.2-r0 alpine-3.18 armhf
Affected pkg:apk/alpine/thunderbird?arch=armhf&distro=alpine-3.18 alpine thunderbird < 91.3.2-r0 alpine-3.18 armhf
Fixed pkg:apk/alpine/thunderbird?arch=armhf&distro=alpine-3.17 alpine thunderbird = 91.3.2-r0 alpine-3.17 armhf
Affected pkg:apk/alpine/thunderbird?arch=armhf&distro=alpine-3.17 alpine thunderbird < 91.3.2-r0 alpine-3.17 armhf
Fixed pkg:apk/alpine/thunderbird?arch=armhf&distro=alpine-3.16 alpine thunderbird = 91.3.2-r0 alpine-3.16 armhf
Affected pkg:apk/alpine/thunderbird?arch=armhf&distro=alpine-3.16 alpine thunderbird < 91.3.2-r0 alpine-3.16 armhf
Fixed pkg:apk/alpine/thunderbird?arch=aarch64&distro=alpine-edge alpine thunderbird = 91.3.2-r0 alpine-edge aarch64
Affected pkg:apk/alpine/thunderbird?arch=aarch64&distro=alpine-edge alpine thunderbird < 91.3.2-r0 alpine-edge aarch64
Fixed pkg:apk/alpine/thunderbird?arch=aarch64&distro=alpine-3.18 alpine thunderbird = 91.3.2-r0 alpine-3.18 aarch64
Affected pkg:apk/alpine/thunderbird?arch=aarch64&distro=alpine-3.18 alpine thunderbird < 91.3.2-r0 alpine-3.18 aarch64
Fixed pkg:apk/alpine/thunderbird?arch=aarch64&distro=alpine-3.17 alpine thunderbird = 91.3.2-r0 alpine-3.17 aarch64
Affected pkg:apk/alpine/thunderbird?arch=aarch64&distro=alpine-3.17 alpine thunderbird < 91.3.2-r0 alpine-3.17 aarch64
Fixed pkg:apk/alpine/thunderbird?arch=aarch64&distro=alpine-3.16 alpine thunderbird = 91.3.2-r0 alpine-3.16 aarch64
Affected pkg:apk/alpine/thunderbird?arch=aarch64&distro=alpine-3.16 alpine thunderbird < 91.3.2-r0 alpine-3.16 aarch64
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date
Loading...