Lucene search

K
alpinelinuxAlpine Linux Development TeamALPINE:CVE-2023-50762
HistoryDec 19, 2023 - 2:15 p.m.

CVE-2023-50762

2023-12-1914:15:07
Alpine Linux Development Team
security.alpinelinux.org
15
pgp
mime
payload
processing
thunderbird
vulnerability

AI Score

6.5

Confidence

Low

EPSS

0.001

Percentile

19.4%

When processing a PGP/MIME payload that contains digitally signed text, the first paragraph of the text was never shown to the user. This is because the text was interpreted as a MIME message and the first paragraph was always treated as an email header section. A digitally signed text from a different context, such as a signed GIT commit, could be used to spoof an email message. This vulnerability affects Thunderbird < 115.6.

OSVersionArchitecturePackageVersionFilename
Alpineedge-communitynoarchthunderbird= 115.5.2-r0UNKNOWN