CVE-2021-29950 — Vulnetix

Try Vulnetix Request Demo

CVE-2021-29950 PUBLISHED

Thunderbird unprotects a secret OpenPGP key prior to using it for a decryption, signing or key import task. If the task runs into a failure, the secret key may remain in memory in its unprotected state. This vulnerability affects Thunderbird < 78.8.1.

EPSS 0.13% · 32.5th percentile

Risk Scores

EPSS Score

0.13%

32.5th percentile

Affected Products

Vendor	Product	Versions
Ubuntu:20.04:LTS	thunderbird	0, 1:68.1.2+build1-0ubuntu1, 1:68.1.2+build1-0ubuntu2
Ubuntu:18.04:LTS	thunderbird	1:68.2.2+build1-0ubuntu0.18.04.1, 1:68.4.1+build1-0ubuntu0.18.04.1, 0

Timeline

Apr 22, 2021 CVE Published
Jun 25, 2021 EPSS Score
Aug 24, 2021 EPSS Score
Oct 22, 2021 EPSS Score
Dec 21, 2021 EPSS Score
Feb 4, 2022 EPSS Score
Feb 19, 2022 EPSS Score
Apr 1, 2022 EPSS Score
Apr 20, 2022 EPSS Score
Jun 18, 2022 EPSS Score
Aug 18, 2022 EPSS Score
Oct 17, 2022 EPSS Score

References

https://ubuntu.com/security/CVE-2021-29950 third-party-advisory
https://www.mozilla.org/en-US/security/advisories/mfsa2021-17/#CVE-2021-29950 third-party-advisory
https://access.redhat.com/security/cve/CVE-2021-29950 third-party-advisory
https://ubuntu.com/security/notices/USN-4936-1 vendor-advisory
https://www.cve.org/CVERecord?id=CVE-2021-29950 third-party-advisory

Open in Interactive Console →