util.c in libpurple in Pidgin before 2.10.8 does not properly allocate memory for HTTP responses that are inconsistent with the Content-Length header, which allows remote HTTP servers to cause a denial of service (application crash) via a crafted response.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade pidgin | Sep 20, 2017 | Feb 6, 2014 |
| Centos_linux | — | Upgrade pidginUpgrade libpurple-develUpgrade finchUpgrade pidgin-docsUpgrade libpurpleUpgrade pidgin-perlUpgrade pidgin-develUpgrade finch-develUpgrade libpurple-tclUpgrade libpurple-perl | Dec 1, 2016 | Feb 6, 2014 |
| Debian | — | Upgrade pidgin | Jul 30, 2024 | Feb 6, 2014 |
| Gentoo Linux | — | Upgrade net-im/pidgin. | Oct 30, 2017 | Feb 6, 2014 |
| Oracle Solaris | — | Upgrade entire to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2 | May 29, 2017 | Feb 6, 2014 |
| Oracle_linux | — | Upgrade pidgin-develUpgrade libpurple-perlUpgrade finchUpgrade finch-develUpgrade libpurpleUpgrade pidgin-perlUpgrade pidginUpgrade pidgin-docsUpgrade libpurple-develUpgrade libpurple-tcl | Oct 16, 2024 | Feb 6, 2014 |
| Suse | — | Upgrade libpurple-branding-upstreamUpgrade leechcraft-historyholderUpgrade libreoffice-branding-basedonopensuseUpgrade pidgin-openfetionUpgrade leechcraft-azoth-autoidlerUpgrade xfce4-session-branding-basedonopensuseUpgrade xfce4-panel-branding-basedonopensuseUpgrade leechcraft-tabslistUpgrade lxde-common-branding-basedonopensuseUpgrade pidgin-plugin-embeddedvideoUpgrade kdebase3-SuSE-branding-basedonopensuseUpgrade pidgin-embeddedvideoUpgrade leechcraft-azoth-metacontactsUpgrade pidgin-branding-openSUSEUpgrade install-initrd-branding-basedonopensuseUpgrade leechcraft-touchstreamsUpgrade leechcraft-azoth-keesoUpgrade kdebase4-workspace-branding-basedonopensuseUpgrade xfce4-settings-branding-basedonopensuseUpgrade libpurple-plugin-mrimUpgrade leechcraft-docUpgrade kdm-branding-basedonopensuseUpgrade gnome-menus-branding-basedonopensuseUpgrade leechcraft-dolozheeUpgrade libpurple-plugin-skype-langUpgrade leechcraft-xproxyUpgrade leechcraft-syncerUpgrade leechcraft-gactsUpgrade leechcraft-azoth-nativeemoticonsUpgrade leechcraft-azoth-depesterUpgrade ksplashx-branding-basedonopensuseUpgrade gtk2-branding-basedonopensuseUpgrade pidgin-plugin-skypeUpgrade leechcraft-monocle-fxbUpgrade leechcraft-bittorrentUpgrade leechcraft-liznooUpgrade gio-branding-basedonopensuseUpgrade fcitx-branding-basedonopensuseUpgrade libpurple-plugin-openfetionUpgrade yast2-branding-basedonopensuseUpgrade leechcraft-pintabUpgrade xfdesktop-branding-basedonopensuseUpgrade leechcraft-lmpUpgrade systemd-presets-branding-basedonopensuseUpgrade pidgin-guificationsUpgrade leechcraft-lastfmscrobbleUpgrade leechcraft-aggregator-bodyfetchUpgrade leechcraft-gmailnotifierUpgrade leechcraft-azoth-rosenthalUpgrade leechcraft-poshuku-onlinebookmarks-deliciousUpgrade leechcraft-monocle-docUpgrade leechcraft-hotsensorsUpgrade kdelibs4-branding-basedonopensuseUpgrade finch-develUpgrade leechcraft-monocle-pdfUpgrade dynamic-wallpaper-branding-basedonopensuseUpgrade leechcraft-shaitanUpgrade leechcraft-vgrabberUpgrade gconf2-branding-basedonopensuseUpgrade leechcraft-azothUpgrade libpurple-develUpgrade pidgin-sipeUpgrade leechcraft-monocle-muUpgrade lightdm-gtk-greeter-branding-basedonopensuseUpgrade leechcraft-monocle-seenUpgrade telepathy-hazeUpgrade leechcraft-poshuku-keywordsUpgrade libpurpleUpgrade libpurple-plugin-openfetion-langUpgrade leechcraft-lmp-mp3tunesUpgrade leechcraft-azoth-zheetUpgrade leechcraft-glanceUpgrade leechcraft-azoth-shxUpgrade leechcraft-blogique-hestiaUpgrade leechcraft-shellopenUpgrade leechcraft-launchyUpgrade e17-branding-basedonopensuseUpgrade gdm-branding-basedonopensuseUpgrade leechcraft-musiczombieUpgrade ksplash-qml-branding-basedonopensuseUpgrade leechcraft-deadlyricsUpgrade libpurple-plugin-bot-sentry-langUpgrade leechcraft-poshuku-cleanwebUpgrade wallpaper-branding-basedonopensuseUpgrade pidgin-develUpgrade libpurple-branding-basedonopensuseUpgrade xfwm4-branding-basedonopensuseUpgrade leechcraft-cstpUpgrade leechcraft-poshuku-onlinebookmarks-readitlaterUpgrade libpurple-plugin-sipeUpgrade pidgin-birthday-reminderUpgrade libpurple-plugin-packUpgrade leechcraft-azoth-standardstylesUpgrade finchUpgrade leechcraft-knowhowUpgrade leechcraft-azoth-otroidUpgrade PackageKit-branding-basedonopensuseUpgrade compiz-branding-basedonopensuseUpgrade leechcraft-poshuku-fuaUpgrade libpurple-plugin-mrim-langUpgrade pidgin-facebookchatUpgrade leechcraft-secmanUpgrade libpurple-plugin-skypeUpgrade leechcraft-anheroUpgrade leechcraft-azoth-xtazyUpgrade splashy-branding-basedonopensuseUpgrade leechcraft-newlifeUpgrade leechcraft-azoth-embedmediaUpgrade pidgin-guifications-langUpgrade grub2-branding-basedonopensuseUpgrade leechcraft-azoth-modnokUpgrade gfxboot-branding-basedonopensuseUpgrade susegreeter-branding-basedonopensuseUpgrade pidgin-advanced-sound-notificationUpgrade awesome-branding-basedonopensuseUpgrade leechcraft-azoth-docUpgrade libsocialweb-branding-basedonopensuseUpgrade pidgin-otrUpgrade leechcraft-azoth-acetamideUpgrade leechcraft-azoth-p100qUpgrade leechcraft-netstoremanager-googledriveUpgrade leechcraft-poshuku-fatapeUpgrade epiphany-branding-basedonopensuseUpgrade libpurple-tclUpgrade bot-sentryUpgrade libpurple-plugin-pack-extrasUpgrade leechcraft-poshukuUpgrade libgarcon-branding-basedonopensuseUpgrade leechcraft-kbswitchUpgrade xfce4-notifyd-branding-basedonopensuseUpgrade leechcraft-azoth-velvetbirdUpgrade libxfce4ui-branding-basedonopensuseUpgrade thunar-volman-branding-basedonopensuseUpgrade libexo-1-0-branding-basedonopensuseUpgrade leechcraft-poshuku-autosearchUpgrade leechcraft-azoth-isteriqueUpgrade leechcraft-dumbeepUpgrade leechcraft-dbusmanagerUpgrade leechcraft-secman-simplestorageUpgrade pidgin-plugin-birthday-reminderUpgrade skype4pidginUpgrade pidgin-plugin-advanced-sound-notificationUpgrade midori-branding-basedonopensuseUpgrade leechcraft-azoth-chathistoryUpgrade leechcraft-popishuUpgrade leechcraft-auscrieUpgrade leechcraft-pogooglueUpgrade leechcraft-azoth-adiumstylesUpgrade leechcraft-monocleUpgrade branding-basedonopensuseUpgrade kdebase4-runtime-branding-basedonopensuseUpgrade leechcraft-otlozhuUpgrade pidgin-plugin-packUpgrade pidginUpgrade leechcraft-tabsessionmanagerUpgrade libpurple-langUpgrade leechcraft-poshuku-onlinebookmarksUpgrade plymouth-branding-basedonopensuseUpgrade sle-sdk-releaseUpgrade pidgin-plugin-pack-extrasUpgrade leechcraft-sb2Upgrade leechcraft-lmp-graffitiUpgrade libpurple-meanwhileUpgrade leechcraft-tpiUpgrade leechcraft-azoth-juickUpgrade leechcraft-networkmonitorUpgrade leechcraft-monocle-postrusUpgrade libpurple-plugin-facebookchatUpgrade leechcraft-poshuku-fileschemeUpgrade leechcraft-azoth-vaderUpgrade purple-plugin-packUpgrade leechcraft-kinotifyUpgrade hicolor-icon-theme-branding-basedonopensuseUpgrade leechcraft-choroidUpgrade leechcraft-lhtrUpgrade leechcraft-lemonUpgrade leechcraft-azoth-xooxUpgrade leechcraft-develUpgrade MozillaFirefox-branding-basedonopensuseUpgrade leechcraft-advancednotificationsUpgrade gtk3-branding-basedonopensuseUpgrade leechcraft-blogiqueUpgrade leechcraft-summaryUpgrade pidgin-mrimUpgrade purple-plugin-pack-langUpgrade libpurple-branding-openSUSEUpgrade gcin-branding-basedonopensuseUpgrade leechcraft-hotstreamsUpgrade leechcraft-vroobyUpgrade leechcraft-azoth-lastseenUpgrade pidgin-plugin-guificationsUpgrade leechcraft-lackmanUpgrade leechcraftUpgrade leechcraft-seekthruUpgrade leechcraft-azoth-autopasteUpgrade libpurple-plugin-bot-sentryUpgrade xfce4-splash-branding-basedonopensuseUpgrade telepathy-plugin-sipeUpgrade leechcraft-aggregatorUpgrade leechcraft-azoth-herbicideUpgrade pidgin-advanced-sound-notification-langUpgrade leechcraft-netstoremanagerUpgrade yast2-qt-branding-basedonopensuseUpgrade leechcraft-azoth-hiliUpgrade leechcraft-azoth-birthdaynotifierUpgrade leechcraft-blogique-metidaUpgrade leechcraft-lmp-dumbsyncUpgrade pidgin-birthday-reminder-lang | Mar 3, 2014 | Feb 6, 2014 |
| Ubuntu | — | Upgrade pidginUpgrade libpurple0 | Nov 8, 2024 | Feb 6, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub