CVE-2021-23993

An attacker may perform a DoS attack to prevent a user from sending encrypted email to a correspondent

published June 24, 2021

CVSS
—
EPSS
0%
Percentile
35.6
In the wild
Unconfirmed
What it is

An attacker may perform a DoS attack to prevent a user from sending encrypted email to a correspondent. If an attacker creates a crafted OpenPGP key with a subkey that has an invalid self signature, and the Thunderbird user imports the crafted key, then Thunderbird may try to use the invalid subkey, but the RNP library rejects it from being used, causing encryption to fail. This vulnerability affects Thunderbird < 78.9.1.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00423 · 35.6th percentile
Published
2021-06-24T13:26Z
EPSS history
Timeline
  • 24 JUN 13:26Z
    An attacker may perform a DoS attack to prevent a user from sending encrypted email to a correspondent
    cvelistv5