Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-mmdw-63mg-2uhm
SummaryIn Enigmail below 2.1, an attacker in possession of PGP encrypted emails can wrap them as sub-parts within a crafted multipart email. The encrypted part(s) can further be hidden using HTML/CSS or ASCII newline characters. This modified multipart email can be re-sent by the attacker to the intended receiver. If the receiver replies to this (benign looking) email, he unknowingly leaks the plaintext of the encrypted message part(s) back to the attacker. This attack variant bypasses protection mechanisms implemented after the "EFAIL" attacks.
Aliases
0
alias CVE-2019-14664
Fixed_packages
0
url pkg:deb/debian/enigmail@2:2.1.3%2Bds1-1?distro=bullseye
purl pkg:deb/debian/enigmail@2:2.1.3%2Bds1-1?distro=bullseye
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/enigmail@2:2.1.3%252Bds1-1%3Fdistro=bullseye
1
url pkg:deb/debian/enigmail@2:2.2.4-0.2~deb10u1
purl pkg:deb/debian/enigmail@2:2.2.4-0.2~deb10u1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/enigmail@2:2.2.4-0.2~deb10u1
2
url pkg:deb/debian/enigmail@2:2.2.4-0.3?distro=bullseye
purl pkg:deb/debian/enigmail@2:2.2.4-0.3?distro=bullseye
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/enigmail@2:2.2.4-0.3%3Fdistro=bullseye
Affected_packages
0
url pkg:deb/debian/enigmail@2:0.91-4sarge2
purl pkg:deb/debian/enigmail@2:0.91-4sarge2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1t5g-b5jt-8yft
1
vulnerability VCID-74uy-aghm-bkhd
2
vulnerability VCID-7535-appn-5fhm
3
vulnerability VCID-9cm4-mu3q-2yey
4
vulnerability VCID-bz74-1y1q-8qfc
5
vulnerability VCID-c5zg-brhd-4ygg
6
vulnerability VCID-f212-18j2-rych
7
vulnerability VCID-g4s8-7k7n-c3an
8
vulnerability VCID-gqrn-ek3y-hbg1
9
vulnerability VCID-mmdw-63mg-2uhm
10
vulnerability VCID-sg6f-tksc-d3f5
11
vulnerability VCID-tqpx-hedp-dfcb
12
vulnerability VCID-ux6a-2384-suf9
13
vulnerability VCID-x8dz-d9af-fyg2
14
vulnerability VCID-xbab-79ux-t3bn
15
vulnerability VCID-yh48-k15t-gqcu
16
vulnerability VCID-zm59-us92-2bh1
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/enigmail@2:0.91-4sarge2
1
url pkg:deb/debian/enigmail@2:0.94.2-1
purl pkg:deb/debian/enigmail@2:0.94.2-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1t5g-b5jt-8yft
1
vulnerability VCID-74uy-aghm-bkhd
2
vulnerability VCID-7535-appn-5fhm
3
vulnerability VCID-9cm4-mu3q-2yey
4
vulnerability VCID-bz74-1y1q-8qfc
5
vulnerability VCID-c5zg-brhd-4ygg
6
vulnerability VCID-f212-18j2-rych
7
vulnerability VCID-g4s8-7k7n-c3an
8
vulnerability VCID-gqrn-ek3y-hbg1
9
vulnerability VCID-mmdw-63mg-2uhm
10
vulnerability VCID-tqpx-hedp-dfcb
11
vulnerability VCID-ux6a-2384-suf9
12
vulnerability VCID-x8dz-d9af-fyg2
13
vulnerability VCID-xbab-79ux-t3bn
14
vulnerability VCID-zm59-us92-2bh1
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/enigmail@2:0.94.2-1
2
url pkg:deb/debian/enigmail@2:0.94.2-2
purl pkg:deb/debian/enigmail@2:0.94.2-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1t5g-b5jt-8yft
1
vulnerability VCID-74uy-aghm-bkhd
2
vulnerability VCID-7535-appn-5fhm
3
vulnerability VCID-9cm4-mu3q-2yey
4
vulnerability VCID-bz74-1y1q-8qfc
5
vulnerability VCID-c5zg-brhd-4ygg
6
vulnerability VCID-f212-18j2-rych
7
vulnerability VCID-g4s8-7k7n-c3an
8
vulnerability VCID-gqrn-ek3y-hbg1
9
vulnerability VCID-mmdw-63mg-2uhm
10
vulnerability VCID-tqpx-hedp-dfcb
11
vulnerability VCID-ux6a-2384-suf9
12
vulnerability VCID-x8dz-d9af-fyg2
13
vulnerability VCID-xbab-79ux-t3bn
14
vulnerability VCID-zm59-us92-2bh1
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/enigmail@2:0.94.2-2
3
url pkg:deb/debian/enigmail@2:0.95.0%2B1-4
purl pkg:deb/debian/enigmail@2:0.95.0%2B1-4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1t5g-b5jt-8yft
1
vulnerability VCID-7535-appn-5fhm
2
vulnerability VCID-9cm4-mu3q-2yey
3
vulnerability VCID-bz74-1y1q-8qfc
4
vulnerability VCID-c5zg-brhd-4ygg
5
vulnerability VCID-f212-18j2-rych
6
vulnerability VCID-g4s8-7k7n-c3an
7
vulnerability VCID-gqrn-ek3y-hbg1
8
vulnerability VCID-mmdw-63mg-2uhm
9
vulnerability VCID-tqpx-hedp-dfcb
10
vulnerability VCID-ux6a-2384-suf9
11
vulnerability VCID-x8dz-d9af-fyg2
12
vulnerability VCID-xbab-79ux-t3bn
13
vulnerability VCID-zm59-us92-2bh1
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/enigmail@2:0.95.0%252B1-4
4
url pkg:deb/debian/enigmail@2:1.0.1-5
purl pkg:deb/debian/enigmail@2:1.0.1-5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1t5g-b5jt-8yft
1
vulnerability VCID-7535-appn-5fhm
2
vulnerability VCID-9cm4-mu3q-2yey
3
vulnerability VCID-bz74-1y1q-8qfc
4
vulnerability VCID-c5zg-brhd-4ygg
5
vulnerability VCID-f212-18j2-rych
6
vulnerability VCID-g4s8-7k7n-c3an
7
vulnerability VCID-gqrn-ek3y-hbg1
8
vulnerability VCID-mmdw-63mg-2uhm
9
vulnerability VCID-tqpx-hedp-dfcb
10
vulnerability VCID-ux6a-2384-suf9
11
vulnerability VCID-x8dz-d9af-fyg2
12
vulnerability VCID-xbab-79ux-t3bn
13
vulnerability VCID-zm59-us92-2bh1
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/enigmail@2:1.0.1-5
5
url pkg:deb/debian/enigmail@2:1.7.2-3
purl pkg:deb/debian/enigmail@2:1.7.2-3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1t5g-b5jt-8yft
1
vulnerability VCID-7535-appn-5fhm
2
vulnerability VCID-9cm4-mu3q-2yey
3
vulnerability VCID-bz74-1y1q-8qfc
4
vulnerability VCID-c5zg-brhd-4ygg
5
vulnerability VCID-f212-18j2-rych
6
vulnerability VCID-g4s8-7k7n-c3an
7
vulnerability VCID-gqrn-ek3y-hbg1
8
vulnerability VCID-mmdw-63mg-2uhm
9
vulnerability VCID-tqpx-hedp-dfcb
10
vulnerability VCID-ux6a-2384-suf9
11
vulnerability VCID-x8dz-d9af-fyg2
12
vulnerability VCID-zm59-us92-2bh1
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/enigmail@2:1.7.2-3
6
url pkg:deb/debian/enigmail@2:1.8.2-4~deb7u1
purl pkg:deb/debian/enigmail@2:1.8.2-4~deb7u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1t5g-b5jt-8yft
1
vulnerability VCID-7535-appn-5fhm
2
vulnerability VCID-9cm4-mu3q-2yey
3
vulnerability VCID-bz74-1y1q-8qfc
4
vulnerability VCID-c5zg-brhd-4ygg
5
vulnerability VCID-f212-18j2-rych
6
vulnerability VCID-g4s8-7k7n-c3an
7
vulnerability VCID-gqrn-ek3y-hbg1
8
vulnerability VCID-mmdw-63mg-2uhm
9
vulnerability VCID-tqpx-hedp-dfcb
10
vulnerability VCID-ux6a-2384-suf9
11
vulnerability VCID-x8dz-d9af-fyg2
12
vulnerability VCID-zm59-us92-2bh1
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/enigmail@2:1.8.2-4~deb7u1
7
url pkg:deb/debian/enigmail@2:1.9.9-1~deb8u1
purl pkg:deb/debian/enigmail@2:1.9.9-1~deb8u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1t5g-b5jt-8yft
1
vulnerability VCID-7535-appn-5fhm
2
vulnerability VCID-9cm4-mu3q-2yey
3
vulnerability VCID-bz74-1y1q-8qfc
4
vulnerability VCID-c5zg-brhd-4ygg
5
vulnerability VCID-g4s8-7k7n-c3an
6
vulnerability VCID-gqrn-ek3y-hbg1
7
vulnerability VCID-mmdw-63mg-2uhm
8
vulnerability VCID-tqpx-hedp-dfcb
9
vulnerability VCID-ux6a-2384-suf9
10
vulnerability VCID-x8dz-d9af-fyg2
11
vulnerability VCID-zm59-us92-2bh1
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/enigmail@2:1.9.9-1~deb8u1
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-14664
reference_id
reference_type
scores
0
value 0.00144
scoring_system epss
scoring_elements 0.34633
published_at 2026-04-01T12:55:00Z
1
value 0.00144
scoring_system epss
scoring_elements 0.34847
published_at 2026-04-02T12:55:00Z
2
value 0.00144
scoring_system epss
scoring_elements 0.34874
published_at 2026-04-04T12:55:00Z
3
value 0.00144
scoring_system epss
scoring_elements 0.3475
published_at 2026-04-07T12:55:00Z
4
value 0.00144
scoring_system epss
scoring_elements 0.34793
published_at 2026-04-08T12:55:00Z
5
value 0.00144
scoring_system epss
scoring_elements 0.34822
published_at 2026-04-09T12:55:00Z
6
value 0.00144
scoring_system epss
scoring_elements 0.34827
published_at 2026-04-11T12:55:00Z
7
value 0.00144
scoring_system epss
scoring_elements 0.34789
published_at 2026-04-12T12:55:00Z
8
value 0.00144
scoring_system epss
scoring_elements 0.34764
published_at 2026-04-13T12:55:00Z
9
value 0.00144
scoring_system epss
scoring_elements 0.34799
published_at 2026-04-16T12:55:00Z
10
value 0.00144
scoring_system epss
scoring_elements 0.34785
published_at 2026-04-18T12:55:00Z
11
value 0.00144
scoring_system epss
scoring_elements 0.34745
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-14664
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14664
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14664
Weaknesses
Exploits
Severity_range_scorenull
Exploitability0.5
Weighted_severity0.0
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-mmdw-63mg-2uhm