CVE catalog

CVE-2018-15586

UBUNTU-CVE-2018-15586

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
1.44% · Oct 25, 2026

Enigmail before 2.0.6 is prone to to OpenPGP signatures being spoofed for arbitrary messages using a PGP/INLINE signature wrapped within a specially crafted multipart HTML email.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianenigmail112:2.0.6.1-2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianenigmaildeb112:2.0.6.1-2Not reportedDEBIAN-CVE-2018-15586Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References