CVE-2021-29969

NameCVE-2021-29969
DescriptionIf Thunderbird was configured to use STARTTLS for an IMAP connection, and an attacker injected IMAP server responses prior to the completion of the STARTTLS handshake, then Thunderbird didn't ignore the injected data. This could have resulted in Thunderbird showing incorrect information, for example the attacker could have tricked Thunderbird to show folders that didn't exist on the IMAP server. This vulnerability affects Thunderbird < 78.12.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
ReferencesDLA-2711-1, DSA-4940-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
thunderbird (PTS)jessie, jessie (lts)1:68.9.0-1~deb8u2vulnerable
stretch (security), stretch (lts), stretch1:91.10.0-1~deb9u1fixed
buster (security), buster, buster (lts)1:115.12.0-1~deb10u1fixed
bullseye1:115.12.0-1~deb11u1fixed
bullseye (security)1:128.4.3esr-1~deb11u1fixed
bookworm1:115.16.0esr-1~deb12u1fixed
bookworm (security)1:128.4.3esr-1~deb12u1fixed
sid, trixie1:128.4.3esr-1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
thunderbirdsourcejessie(unfixed)end-of-life
thunderbirdsourcestretch1:78.12.0-1~deb9u1DLA-2711-1
thunderbirdsourcebuster1:78.12.0-1~deb10u1DSA-4940-1
thunderbirdsource(unstable)1:78.12.0-1

Notes

https://www.mozilla.org/en-US/security/advisories/mfsa2021-30/#CVE-2021-29969

Search for package or bug name: Reporting problems