Pidgin before 2.10.8 allows remote MSN servers to cause a denial of service (NULL pointer dereference and crash) via a crafted (1) SOAP response, (2) OIM XML response, or (3) Content-Length header.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade pidgin | Sep 20, 2017 | Feb 6, 2014 |
| Centos_linux | — | Upgrade pidgin-perlUpgrade pidgin-develUpgrade finch-develUpgrade pidgin-docsUpgrade pidginUpgrade libpurple-develUpgrade libpurpleUpgrade libpurple-tclUpgrade finchUpgrade libpurple-perl | Dec 1, 2016 | Feb 6, 2014 |
| Debian | — | Upgrade pidgin | Jul 30, 2024 | Feb 6, 2014 |
| Gentoo Linux | — | Upgrade net-im/pidgin. | Oct 30, 2017 | Feb 6, 2014 |
| Oracle Solaris | — | Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2Upgrade entire to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2 | May 29, 2017 | Feb 6, 2014 |
| Oracle_linux | — | Upgrade finch-develUpgrade pidgin-develUpgrade pidginUpgrade finchUpgrade pidgin-docsUpgrade pidgin-perlUpgrade libpurple-tclUpgrade libpurple-perlUpgrade libpurple-develUpgrade libpurple | Oct 16, 2024 | Feb 6, 2014 |
| Suse | — | Upgrade leechcraft-monocle-muUpgrade leechcraft-musiczombieUpgrade leechcraft-poshuku-keywordsUpgrade leechcraft-azoth-adiumstylesUpgrade susegreeter-branding-basedonopensuseUpgrade leechcraft-xproxyUpgrade leechcraft-vroobyUpgrade leechcraft-gmailnotifierUpgrade leechcraft-blogique-metidaUpgrade leechcraft-hotstreamsUpgrade leechcraft-azoth-xooxUpgrade leechcraft-gactsUpgrade leechcraft-dolozheeUpgrade leechcraft-azothUpgrade leechcraft-azoth-metacontactsUpgrade leechcraft-azoth-keesoUpgrade leechcraft-monocle-seenUpgrade PackageKit-branding-basedonopensuseUpgrade xfdesktop-branding-basedonopensuseUpgrade leechcraft-hotsensorsUpgrade leechcraft-azoth-shxUpgrade leechcraft-vgrabberUpgrade leechcraft-otlozhuUpgrade leechcraft-lmp-dumbsyncUpgrade yast2-branding-basedonopensuseUpgrade kdebase3-SuSE-branding-basedonopensuseUpgrade leechcraft-shaitanUpgrade leechcraft-lhtrUpgrade pidgin-branding-openSUSEUpgrade libpurple-branding-upstreamUpgrade libpurple-plugin-bot-sentryUpgrade leechcraft-azoth-nativeemoticonsUpgrade leechcraft-aggregatorUpgrade xfwm4-branding-basedonopensuseUpgrade gtk3-branding-basedonopensuseUpgrade leechcraft-bittorrentUpgrade yast2-qt-branding-basedonopensuseUpgrade pidgin-guifications-langUpgrade leechcraft-lackmanUpgrade leechcraft-poshuku-fileschemeUpgrade xfce4-splash-branding-basedonopensuseUpgrade skype4pidginUpgrade leechcraftUpgrade leechcraft-monocle-pdfUpgrade leechcraft-dbusmanagerUpgrade leechcraft-syncerUpgrade libpurple-develUpgrade lxde-common-branding-basedonopensuseUpgrade midori-branding-basedonopensuseUpgrade libpurple-plugin-mrim-langUpgrade gio-branding-basedonopensuseUpgrade gtk2-branding-basedonopensuseUpgrade leechcraft-liznooUpgrade grub2-branding-basedonopensuseUpgrade leechcraft-develUpgrade pidgin-embeddedvideoUpgrade splashy-branding-basedonopensuseUpgrade pidgin-plugin-embeddedvideoUpgrade leechcraft-choroidUpgrade leechcraft-netstoremanagerUpgrade leechcraft-azoth-standardstylesUpgrade libpurple-tclUpgrade leechcraft-blogique-hestiaUpgrade leechcraft-kinotifyUpgrade xfce4-panel-branding-basedonopensuseUpgrade leechcraft-newlifeUpgrade leechcraft-monocle-docUpgrade leechcraft-blogiqueUpgrade leechcraft-knowhowUpgrade pidgin-guificationsUpgrade kdm-branding-basedonopensuseUpgrade leechcraft-monocle-postrusUpgrade telepathy-plugin-sipeUpgrade leechcraft-networkmonitorUpgrade leechcraft-azoth-autopasteUpgrade purple-plugin-packUpgrade leechcraft-poshuku-fuaUpgrade kdebase4-workspace-branding-basedonopensuseUpgrade systemd-presets-branding-basedonopensuseUpgrade wallpaper-branding-basedonopensuseUpgrade libpurple-branding-openSUSEUpgrade leechcraft-monocleUpgrade leechcraft-azoth-lastseenUpgrade gcin-branding-basedonopensuseUpgrade libpurple-plugin-mrimUpgrade libpurple-plugin-bot-sentry-langUpgrade leechcraft-lemonUpgrade pidgin-advanced-sound-notificationUpgrade leechcraft-deadlyricsUpgrade leechcraft-azoth-juickUpgrade pidgin-plugin-guificationsUpgrade leechcraft-lmpUpgrade pidgin-advanced-sound-notification-langUpgrade leechcraft-azoth-herbicideUpgrade leechcraft-azoth-p100qUpgrade libreoffice-branding-basedonopensuseUpgrade leechcraft-pintabUpgrade hicolor-icon-theme-branding-basedonopensuseUpgrade xfce4-session-branding-basedonopensuseUpgrade libpurple-langUpgrade pidgin-plugin-pack-extrasUpgrade install-initrd-branding-basedonopensuseUpgrade leechcraft-azoth-hiliUpgrade leechcraft-summaryUpgrade pidgin-develUpgrade leechcraft-aggregator-bodyfetchUpgrade libpurple-plugin-sipeUpgrade libpurple-plugin-pack-extrasUpgrade pidgin-plugin-skypeUpgrade thunar-volman-branding-basedonopensuseUpgrade leechcraft-azoth-birthdaynotifierUpgrade libpurple-meanwhileUpgrade leechcraft-cstpUpgrade MozillaFirefox-branding-basedonopensuseUpgrade kdelibs4-branding-basedonopensuseUpgrade pidgin-plugin-packUpgrade leechcraft-launchyUpgrade leechcraft-glanceUpgrade leechcraft-sb2Upgrade finch-develUpgrade ksplashx-branding-basedonopensuseUpgrade leechcraft-poshuku-fatapeUpgrade leechcraft-monocle-fxbUpgrade libxfce4ui-branding-basedonopensuseUpgrade leechcraft-poshuku-onlinebookmarks-deliciousUpgrade leechcraft-historyholderUpgrade leechcraft-poshuku-onlinebookmarksUpgrade leechcraft-azoth-otroidUpgrade xfce4-notifyd-branding-basedonopensuseUpgrade leechcraft-tabsessionmanagerUpgrade awesome-branding-basedonopensuseUpgrade xfce4-settings-branding-basedonopensuseUpgrade bot-sentryUpgrade plymouth-branding-basedonopensuseUpgrade leechcraft-lastfmscrobbleUpgrade libpurple-plugin-facebookchatUpgrade leechcraft-advancednotificationsUpgrade purple-plugin-pack-langUpgrade ksplash-qml-branding-basedonopensuseUpgrade pidgin-plugin-birthday-reminderUpgrade branding-basedonopensuseUpgrade pidgin-sipeUpgrade leechcraft-lmp-mp3tunesUpgrade leechcraft-azoth-modnokUpgrade libpurple-plugin-openfetion-langUpgrade leechcraft-poshuku-autosearchUpgrade leechcraft-tpiUpgrade gdm-branding-basedonopensuseUpgrade leechcraft-poshuku-cleanwebUpgrade leechcraft-tabslistUpgrade leechcraft-secman-simplestorageUpgrade fcitx-branding-basedonopensuseUpgrade pidgin-birthday-reminder-langUpgrade libexo-1-0-branding-basedonopensuseUpgrade leechcraft-azoth-xtazyUpgrade dynamic-wallpaper-branding-basedonopensuseUpgrade libpurple-plugin-skypeUpgrade leechcraft-azoth-depesterUpgrade pidgin-facebookchatUpgrade leechcraft-pogooglueUpgrade leechcraft-azoth-vaderUpgrade leechcraft-azoth-autoidlerUpgrade libpurple-plugin-openfetionUpgrade pidgin-mrimUpgrade leechcraft-azoth-acetamideUpgrade leechcraft-poshukuUpgrade pidgin-otrUpgrade telepathy-hazeUpgrade leechcraft-lmp-graffitiUpgrade pidgin-birthday-reminderUpgrade finchUpgrade leechcraft-azoth-isteriqueUpgrade libpurple-plugin-skype-langUpgrade leechcraft-azoth-zheetUpgrade leechcraft-anheroUpgrade e17-branding-basedonopensuseUpgrade kdebase4-runtime-branding-basedonopensuseUpgrade leechcraft-touchstreamsUpgrade pidginUpgrade pidgin-openfetionUpgrade leechcraft-azoth-embedmediaUpgrade leechcraft-shellopenUpgrade leechcraft-dumbeepUpgrade leechcraft-docUpgrade gconf2-branding-basedonopensuseUpgrade libgarcon-branding-basedonopensuseUpgrade leechcraft-auscrieUpgrade epiphany-branding-basedonopensuseUpgrade libpurple-branding-basedonopensuseUpgrade libpurple-plugin-packUpgrade leechcraft-secmanUpgrade gfxboot-branding-basedonopensuseUpgrade leechcraft-azoth-velvetbirdUpgrade leechcraft-azoth-chathistoryUpgrade leechcraft-popishuUpgrade libsocialweb-branding-basedonopensuseUpgrade lightdm-gtk-greeter-branding-basedonopensuseUpgrade sle-sdk-releaseUpgrade leechcraft-netstoremanager-googledriveUpgrade leechcraft-azoth-docUpgrade gnome-menus-branding-basedonopensuseUpgrade leechcraft-azoth-rosenthalUpgrade leechcraft-kbswitchUpgrade leechcraft-seekthruUpgrade leechcraft-poshuku-onlinebookmarks-readitlaterUpgrade pidgin-plugin-advanced-sound-notificationUpgrade libpurpleUpgrade compiz-branding-basedonopensuse | Mar 3, 2014 | Feb 6, 2014 |
| Ubuntu | — | Upgrade pidginUpgrade libpurple0 | Nov 8, 2024 | Feb 6, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub