CVE-2021-29957
Summary
| CVE | CVE-2021-29957 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-06-24 14:15:00 UTC |
| Updated | 2021-06-30 17:30:00 UTC |
| Description | If a MIME encoded email contains an OpenPGP inline signed or encrypted message part, but also contains an additional unprotected part, Thunderbird did not indicate that only parts of the message are protected. This vulnerability affects Thunderbird < 78.10.2. |
Risk And Classification
Problem Types: NVD-CWE-Other
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Mozilla | Thunderbird | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| 1673241 - (CVE-2021-29957) RNP-01-008 WP3 Thunderbird: Partially unencrypted email insufficiently detected (Low) | MISC | bugzilla.mozilla.org | |
| Security Vulnerabilities fixed in Thunderbird 78.10.2 — Mozilla | MISC | www.mozilla.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 159247 Oracle Enterprise Linux Security Update for thunderbird (ELSA-2021-2263)
- 159248 Oracle Enterprise Linux Security Update for thunderbird (ELSA-2021-2264)
- 178653 Debian Security Update for thunderbird (DSA 4927-1)
- 178662 Debian Security Update for thunderbird (DLA 2679-1)
- 180342 Debian Security Update for thunderbird (CVE-2021-29957)
- 198415 Ubuntu Security Notification for Thunderbird vulnerabilities (USN-4995-1)
- 198424 Ubuntu Security Notification for Thunderbird vulnerabilities (USN-4995-2)
- 239360 Red Hat Update for thunderbird (RHSA-2021:2264)
- 239361 Red Hat Update for thunderbird (RHSA-2021:2262)
- 239416 Red Hat Update for thunderbird (RHSA-2021:2263)
- 239417 Red Hat Update for thunderbird (RHSA-2021:2261)
- 296053 Oracle Solaris 11.4 Support Repository Update (SRU) 35.94.4 Missing (CPUJUL2021)
- 352456 Amazon Linux Security Advisory for thunderbird: ALAS2-2021-1681
- 375578 Mozilla Thunderbird Security Vulnerability (MFSA2021-22)
- 502381 Alpine Linux Security Update for thunderbird
- 503632 Alpine Linux Security Update for thunderbird
- 503634 Alpine Linux Security Update for thunderbird
- 503650 Alpine Linux Security Update for thunderbird
- 503669 Alpine Linux Security Update for thunderbird
- 506260 Alpine Linux Security Update for thunderbird
- 750810 OpenSUSE Security Update for MozillaThunderbird (openSUSE-SU-2021:1854-1)
- 940023 AlmaLinux Security Update for thunderbird (ALSA-2021:2264)
- 960045 Rocky Linux Security Update for thunderbird (RLSA-2021:2264)