libpurple/protocols/yahoo/libymsg.c in Pidgin before 2.10.8 allows remote attackers to cause a denial of service (crash) via a Yahoo! P2P message with a crafted length field, which triggers a buffer over-read.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade pidgin | Sep 20, 2017 | Feb 6, 2014 |
| Centos_linux | — | Upgrade pidginUpgrade finch-develUpgrade finchUpgrade pidgin-perlUpgrade libpurple-tclUpgrade pidgin-docsUpgrade libpurple-perlUpgrade libpurple-develUpgrade libpurpleUpgrade pidgin-devel | Dec 1, 2016 | Feb 6, 2014 |
| Debian | — | Upgrade pidgin | Jul 30, 2024 | Feb 6, 2014 |
| Gentoo Linux | — | Upgrade net-im/pidgin. | Oct 30, 2017 | Feb 6, 2014 |
| Oracle Solaris | — | Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2Upgrade entire to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2 | May 29, 2017 | Feb 6, 2014 |
| Oracle_linux | — | Upgrade finch-develUpgrade pidgin-docsUpgrade pidgin-perlUpgrade pidginUpgrade pidgin-develUpgrade finchUpgrade libpurpleUpgrade libpurple-develUpgrade libpurple-tclUpgrade libpurple-perl | Oct 16, 2024 | Feb 6, 2014 |
| Suse | — | Upgrade leechcraft-anheroUpgrade leechcraft-otlozhuUpgrade pidgin-develUpgrade leechcraft-azoth-birthdaynotifierUpgrade leechcraft-lemonUpgrade leechcraft-azoth-autopasteUpgrade fcitx-branding-basedonopensuseUpgrade ksplashx-branding-basedonopensuseUpgrade leechcraft-secmanUpgrade leechcraft-monocle-pdfUpgrade libpurple-tclUpgrade libreoffice-branding-basedonopensuseUpgrade libxfce4ui-branding-basedonopensuseUpgrade gconf2-branding-basedonopensuseUpgrade pidgin-advanced-sound-notificationUpgrade splashy-branding-basedonopensuseUpgrade leechcraft-tabslistUpgrade leechcraft-monocle-seenUpgrade install-initrd-branding-basedonopensuseUpgrade gnome-menus-branding-basedonopensuseUpgrade pidgin-mrimUpgrade telepathy-plugin-sipeUpgrade leechcraft-sb2Upgrade leechcraft-secman-simplestorageUpgrade leechcraft-dolozheeUpgrade purple-plugin-packUpgrade pidgin-birthday-reminder-langUpgrade leechcraft-azoth-xtazyUpgrade pidgin-advanced-sound-notification-langUpgrade leechcraft-azoth-herbicideUpgrade gcin-branding-basedonopensuseUpgrade leechcraft-monocle-docUpgrade pidgin-plugin-embeddedvideoUpgrade leechcraft-netstoremanager-googledriveUpgrade leechcraft-advancednotificationsUpgrade leechcraft-bittorrentUpgrade finch-develUpgrade leechcraft-popishuUpgrade pidgin-branding-openSUSEUpgrade leechcraft-tpiUpgrade leechcraft-poshuku-onlinebookmarks-deliciousUpgrade leechcraft-monocle-postrusUpgrade leechcraft-azoth-modnokUpgrade libpurple-plugin-mrimUpgrade pidgin-plugin-pack-extrasUpgrade skype4pidginUpgrade ksplash-qml-branding-basedonopensuseUpgrade leechcraft-musiczombieUpgrade epiphany-branding-basedonopensuseUpgrade bot-sentryUpgrade branding-basedonopensuseUpgrade pidgin-otrUpgrade gfxboot-branding-basedonopensuseUpgrade midori-branding-basedonopensuseUpgrade kdebase4-runtime-branding-basedonopensuseUpgrade leechcraft-blogique-metidaUpgrade pidgin-plugin-birthday-reminderUpgrade leechcraft-shaitanUpgrade libgarcon-branding-basedonopensuseUpgrade leechcraft-blogiqueUpgrade xfce4-splash-branding-basedonopensuseUpgrade MozillaFirefox-branding-basedonopensuseUpgrade libpurple-plugin-skype-langUpgrade leechcraft-poshukuUpgrade xfce4-settings-branding-basedonopensuseUpgrade leechcraft-azoth-keesoUpgrade pidgin-plugin-advanced-sound-notificationUpgrade leechcraft-netstoremanagerUpgrade finchUpgrade leechcraft-azoth-standardstylesUpgrade libpurple-langUpgrade dynamic-wallpaper-branding-basedonopensuseUpgrade leechcraft-choroidUpgrade libpurple-branding-upstreamUpgrade leechcraft-azoth-lastseenUpgrade leechcraft-touchstreamsUpgrade leechcraft-monocleUpgrade pidgin-sipeUpgrade xfce4-panel-branding-basedonopensuseUpgrade leechcraft-aggregatorUpgrade leechcraft-gmailnotifierUpgrade leechcraft-azoth-adiumstylesUpgrade e17-branding-basedonopensuseUpgrade leechcraft-lmp-mp3tunesUpgrade gtk3-branding-basedonopensuseUpgrade leechcraft-pogooglueUpgrade leechcraft-azothUpgrade leechcraft-azoth-metacontactsUpgrade pidginUpgrade leechcraft-azoth-autoidlerUpgrade lightdm-gtk-greeter-branding-basedonopensuseUpgrade yast2-branding-basedonopensuseUpgrade leechcraft-lackmanUpgrade leechcraft-azoth-vaderUpgrade libpurple-plugin-sipeUpgrade libpurple-plugin-skypeUpgrade leechcraft-shellopenUpgrade leechcraft-azoth-p100qUpgrade leechcraft-poshuku-cleanwebUpgrade leechcraft-glanceUpgrade leechcraft-azoth-isteriqueUpgrade systemd-presets-branding-basedonopensuseUpgrade sle-sdk-releaseUpgrade leechcraft-liznooUpgrade susegreeter-branding-basedonopensuseUpgrade leechcraft-poshuku-onlinebookmarks-readitlaterUpgrade leechcraft-dumbeepUpgrade leechcraft-azoth-velvetbirdUpgrade libpurple-plugin-bot-sentryUpgrade leechcraft-networkmonitorUpgrade pidgin-birthday-reminderUpgrade leechcraft-azoth-hiliUpgrade leechcraft-docUpgrade leechcraft-lhtrUpgrade leechcraft-pintabUpgrade libpurple-branding-openSUSEUpgrade lxde-common-branding-basedonopensuseUpgrade leechcraft-poshuku-autosearchUpgrade wallpaper-branding-basedonopensuseUpgrade grub2-branding-basedonopensuseUpgrade leechcraft-lmp-dumbsyncUpgrade pidgin-plugin-skypeUpgrade leechcraft-lmp-graffitiUpgrade telepathy-hazeUpgrade libpurple-plugin-pack-extrasUpgrade leechcraft-hotsensorsUpgrade libpurple-plugin-packUpgrade thunar-volman-branding-basedonopensuseUpgrade pidgin-embeddedvideoUpgrade leechcraft-knowhowUpgrade leechcraft-azoth-otroidUpgrade leechcraft-hotstreamsUpgrade leechcraft-vgrabberUpgrade leechcraft-azoth-xooxUpgrade leechcraft-lastfmscrobbleUpgrade xfdesktop-branding-basedonopensuseUpgrade leechcraft-newlifeUpgrade leechcraft-poshuku-fileschemeUpgrade leechcraft-launchyUpgrade leechcraft-dbusmanagerUpgrade kdebase4-workspace-branding-basedonopensuseUpgrade compiz-branding-basedonopensuseUpgrade leechcraft-azoth-docUpgrade leechcraft-xproxyUpgrade leechcraft-seekthruUpgrade leechcraft-azoth-depesterUpgrade leechcraft-monocle-muUpgrade libpurple-plugin-mrim-langUpgrade leechcraft-kbswitchUpgrade leechcraft-monocle-fxbUpgrade leechcraft-azoth-juickUpgrade gdm-branding-basedonopensuseUpgrade awesome-branding-basedonopensuseUpgrade libpurple-plugin-openfetion-langUpgrade plymouth-branding-basedonopensuseUpgrade yast2-qt-branding-basedonopensuseUpgrade leechcraft-kinotifyUpgrade libpurple-plugin-bot-sentry-langUpgrade kdelibs4-branding-basedonopensuseUpgrade pidgin-guificationsUpgrade purple-plugin-pack-langUpgrade libpurple-branding-basedonopensuseUpgrade libsocialweb-branding-basedonopensuseUpgrade leechcraft-syncerUpgrade PackageKit-branding-basedonopensuseUpgrade hicolor-icon-theme-branding-basedonopensuseUpgrade leechcraft-azoth-nativeemoticonsUpgrade leechcraft-gactsUpgrade leechcraft-tabsessionmanagerUpgrade pidgin-guifications-langUpgrade leechcraft-poshuku-onlinebookmarksUpgrade pidgin-facebookchatUpgrade leechcraft-azoth-acetamideUpgrade leechcraft-poshuku-fatapeUpgrade kdm-branding-basedonopensuseUpgrade pidgin-openfetionUpgrade xfce4-session-branding-basedonopensuseUpgrade leechcraft-aggregator-bodyfetchUpgrade leechcraft-azoth-rosenthalUpgrade leechcraft-auscrieUpgrade libpurple-plugin-openfetionUpgrade xfce4-notifyd-branding-basedonopensuseUpgrade leechcraft-cstpUpgrade leechcraft-poshuku-keywordsUpgrade xfwm4-branding-basedonopensuseUpgrade leechcraft-azoth-zheetUpgrade leechcraft-summaryUpgrade leechcraft-develUpgrade libpurple-develUpgrade libpurpleUpgrade leechcraft-azoth-embedmediaUpgrade kdebase3-SuSE-branding-basedonopensuseUpgrade leechcraft-azoth-chathistoryUpgrade leechcraft-azoth-shxUpgrade leechcraft-historyholderUpgrade leechcraft-blogique-hestiaUpgrade gio-branding-basedonopensuseUpgrade pidgin-plugin-guificationsUpgrade libexo-1-0-branding-basedonopensuseUpgrade libpurple-meanwhileUpgrade pidgin-plugin-packUpgrade leechcraft-deadlyricsUpgrade leechcraftUpgrade gtk2-branding-basedonopensuseUpgrade leechcraft-vroobyUpgrade leechcraft-lmpUpgrade libpurple-plugin-facebookchatUpgrade leechcraft-poshuku-fua | Mar 3, 2014 | Feb 6, 2014 |
| Ubuntu | — | Upgrade pidginUpgrade libpurple0 | Nov 8, 2024 | Feb 6, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub