k-9 mail vulnerabilities and fixes

Q: How do I fix k-9 mail vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Q: Is k-9 mail being exploited right now?

None of the tracked k-9 mail CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Q: Which k-9 mail CVE should I patch first?

CVE-2018-1000831 currently ranks highest (60/100): K9Mail version <= v5.600 contains a XML External Entity (XXE) vulnerability in WebDAV response parser that can.

Recent CVEs affecting k-9 mail, with upgrade or downgrade steps. 2 tracked.

Also searched as: k 9 mail, k-9mail.

k-9 mail has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2019-04-07. Highest priority: CVE-2018-1000831 (score 60/100).

CVE-2019-10741 MEDIUM 4.3 DOWNGRADE K-9 Mail v5.600 can include the original quoted HTML code of a specially crafted, benign looking, email within
CVE-2018-1000831 CRITICAL 10.0 UPGRADE K9Mail version <= v5.600 contains a XML External Entity (XXE) vulnerability in WebDAV response parser that can

FAQ

How do I fix k-9 mail vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is k-9 mail being exploited right now?

None of the tracked k-9 mail CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which k-9 mail CVE should I patch first?

CVE-2018-1000831 currently ranks highest (60/100): K9Mail version <= v5.600 contains a XML External Entity (XXE) vulnerability in WebDAV response parser that can.

← Back to latest CVEs