CVE-2018-4227

CVE-2018-4227 affects Apple Mail in iOS prior to 11.4 and macOS prior to 10.13.5, enabling remote attackers to read the cleartext contents of S/MIME encrypted messages via direct exfiltration. The Apple advisory notes the issue relates to handling of S/MIME and MIME isolation within Mail, with mi...

CVE-2018-4227: Cleartext Transmission of Sensitive Information

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. The issue involves the "Mail" component. It allows remote attackers to read the cleartext content of S/MIME encrypted messages via direct exfiltration...

CVE-2018-4221: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. The issue involves the "Security" component. It allows web sites to track users by leveraging the transmission of S/MIME client certificates...

PT-2018-16489

Name of the Vulnerable Software and Affected Versions iOS versions prior to 11.4 macOS versions prior to 10.13.5 Description The issue involves the Security component and allows websites to track users by leveraging the transmission of S/MIME client certificates. Recommendations For iOS versions...

PT-2018-16495

Name of the Vulnerable Software and Affected Versions iOS versions prior to 11.4 macOS versions prior to 10.13.5 Description The issue involves the Mail component and allows remote attackers to read the cleartext content of S/MIME encrypted messages via direct exfiltration. Recommendations For iO...

CVE-2017-16138

The mime module is vulnerable to regular expression denial of service when a mime lookup is performed on untrusted user input...

DEBIAN-CVE-2017-16138

The mime module 1.4.1, 2.0.1, 2.0.2 is vulnerable to regular expression denial of service when a mime lookup is performed on untrusted user input...

CVE-2017-16138

The mime module 1.4.1, 2.0.1, 2.0.2 is vulnerable to regular expression denial of service when a mime lookup is performed on untrusted user input...

CVE-2017-16138

The mime module 1.4.1, 2.0.1, 2.0.2 is vulnerable to regular expression denial of service when a mime lookup is performed on untrusted user input...

UBUNTU-CVE-2017-16138

The mime module 1.4.1, 2.0.1, 2.0.2 is vulnerable to regular expression denial of service when a mime lookup is performed on untrusted user input...

Input validation

The mime module 1.4.1, 2.0.1, 2.0.2 is vulnerable to regular expression denial of service when a mime lookup is performed on untrusted user input...

CVE-2017-16138

The mime module 1.4.1, 2.0.1, 2.0.2 is vulnerable to regular expression denial of service when a mime lookup is performed on untrusted user input...

CVE-2017-16138

The mime module 1.4.1, 2.0.1, 2.0.2 is vulnerable to regular expression denial of service when a mime lookup is performed on untrusted user input...

CVE-2017-16138

CVE-2017-16138 affects the mime Node.js module, with vulnerable versions including

CVE-2017-16138

The mime module 1.4.1, 2.0.1, 2.0.2 is vulnerable to regular expression denial of service when a mime lookup is performed on untrusted user input...

CVE-2017-16138

The mime module 1.4.1, 2.0.1, 2.0.2 is vulnerable to regular expression denial of service when a mime lookup is performed on untrusted user input...

PT-2018-6165

Name of the Vulnerable Software and Affected Versions: mime versions prior to 1.4.1 mime versions 2.0.1, 2.0.2 Description: The issue concerns a regular expression denial of service that occurs when a mime lookup is performed on untrusted user input. Recommendations: For mime versions prior to...

CVE-2017-16138: Uncontrolled Resource Consumption

The mime module 1.4.1, 2.0.1, 2.0.2 is vulnerable to regular expression denial of service when a mime lookup is performed on untrusted user input...

E-Mail Vulnerabilities and Disclosure

Last week, researchers disclosed vulnerabilities in a large number of encrypted e-mail clients: specifically, those that use OpenPGP and S/MIME, including Thunderbird and AppleMail. These are serious vulnerabilities: An attacker who can alter mail sent to a vulnerable client can trick that client...

Apple iOS and macOS High Sierra Security S-MIME Certificate Handling Vulnerability

Apple iOS and macOS High Sierra are products of Apple Inc. Apple iOS is an operating system for mobile devices; macOS High Sierra is a specialized operating system for Mac computers. security is an information security and privacy component. Security is an information security and privacy...