The XMPP protocol plugin in libpurple in Pidgin before 2.10.8 does not properly determine whether the from address in an iq reply is consistent with the to address in an iq request, which allows remote attackers to spoof iq traffic or cause a denial of service (NULL pointer dereference and application crash) via a crafted reply.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade pidgin | Sep 20, 2017 | Feb 6, 2014 |
| Centos_linux | — | Upgrade libpurple-perlUpgrade libpurple-develUpgrade libpurple-tclUpgrade finch-develUpgrade pidginUpgrade pidgin-docsUpgrade libpurpleUpgrade pidgin-perlUpgrade finchUpgrade pidgin-devel | Dec 1, 2016 | Feb 6, 2014 |
| Debian | — | Upgrade pidgin | Jul 30, 2024 | Feb 6, 2014 |
| Gentoo Linux | — | Upgrade net-im/pidgin. | Oct 30, 2017 | Feb 6, 2014 |
| Oracle Solaris | — | Upgrade entire to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2 | May 29, 2017 | Feb 6, 2014 |
| Oracle_linux | — | Upgrade libpurple-perlUpgrade pidgin-perlUpgrade finch-develUpgrade pidgin-docsUpgrade pidgin-develUpgrade libpurpleUpgrade pidginUpgrade finchUpgrade libpurple-develUpgrade libpurple-tcl | Oct 16, 2024 | Feb 6, 2014 |
| Suse | — | Upgrade leechcraft-advancednotificationsUpgrade leechcraft-dolozheeUpgrade leechcraft-historyholderUpgrade libpurple-plugin-mrimUpgrade pidgin-plugin-pack-extrasUpgrade leechcraft-deadlyricsUpgrade libpurple-meanwhileUpgrade leechcraft-bittorrentUpgrade ksplashx-branding-basedonopensuseUpgrade leechcraftUpgrade MozillaFirefox-branding-basedonopensuseUpgrade leechcraft-azoth-herbicideUpgrade pidgin-plugin-guificationsUpgrade leechcraft-poshuku-fuaUpgrade gfxboot-branding-basedonopensuseUpgrade leechcraft-azoth-xtazyUpgrade leechcraft-otlozhuUpgrade leechcraft-aggregatorUpgrade telepathy-plugin-sipeUpgrade libgarcon-branding-basedonopensuseUpgrade leechcraft-blogique-hestiaUpgrade leechcraft-poshuku-onlinebookmarks-deliciousUpgrade kdebase4-runtime-branding-basedonopensuseUpgrade e17-branding-basedonopensuseUpgrade leechcraft-tpiUpgrade leechcraft-secman-simplestorageUpgrade xfce4-splash-branding-basedonopensuseUpgrade leechcraft-monocle-postrusUpgrade awesome-branding-basedonopensuseUpgrade pidgin-branding-openSUSEUpgrade pidgin-mrimUpgrade leechcraft-azoth-standardstylesUpgrade kdebase3-SuSE-branding-basedonopensuseUpgrade pidgin-sipeUpgrade leechcraft-azoth-shxUpgrade xfce4-panel-branding-basedonopensuseUpgrade finch-develUpgrade pidgin-advanced-sound-notificationUpgrade leechcraft-vroobyUpgrade purple-plugin-packUpgrade leechcraft-monocle-seenUpgrade midori-branding-basedonopensuseUpgrade leechcraft-lmp-mp3tunesUpgrade libpurple-tclUpgrade leechcraft-sb2Upgrade leechcraft-monocle-docUpgrade leechcraft-gmailnotifierUpgrade libpurple-plugin-bot-sentry-langUpgrade leechcraft-netstoremanager-googledriveUpgrade gtk2-branding-basedonopensuseUpgrade leechcraft-musiczombieUpgrade leechcraft-kbswitchUpgrade skype4pidginUpgrade leechcraft-tabslistUpgrade leechcraft-blogique-metidaUpgrade xfce4-settings-branding-basedonopensuseUpgrade leechcraft-azoth-chathistoryUpgrade leechcraft-touchstreamsUpgrade pidgin-plugin-embeddedvideoUpgrade leechcraft-azoth-keesoUpgrade leechcraft-poshuku-fatapeUpgrade leechcraft-knowhowUpgrade leechcraft-azoth-modnokUpgrade leechcraft-azoth-birthdaynotifierUpgrade leechcraft-shellopenUpgrade leechcraft-popishuUpgrade finchUpgrade install-initrd-branding-basedonopensuseUpgrade libpurple-langUpgrade splashy-branding-basedonopensuseUpgrade libpurple-plugin-skype-langUpgrade libreoffice-branding-basedonopensuseUpgrade libxfce4ui-branding-basedonopensuseUpgrade leechcraft-azoth-autopasteUpgrade epiphany-branding-basedonopensuseUpgrade pidgin-advanced-sound-notification-langUpgrade pidgin-plugin-packUpgrade leechcraft-poshukuUpgrade lightdm-gtk-greeter-branding-basedonopensuseUpgrade libpurpleUpgrade leechcraft-azoth-adiumstylesUpgrade leechcraft-shaitanUpgrade fcitx-branding-basedonopensuseUpgrade pidgin-birthday-reminder-langUpgrade ksplash-qml-branding-basedonopensuseUpgrade leechcraft-monocleUpgrade leechcraft-anheroUpgrade libsocialweb-branding-basedonopensuseUpgrade dynamic-wallpaper-branding-basedonopensuseUpgrade pidgin-develUpgrade branding-basedonopensuseUpgrade leechcraft-choroidUpgrade pidgin-plugin-advanced-sound-notificationUpgrade leechcraft-dbusmanagerUpgrade bot-sentryUpgrade leechcraft-monocle-pdfUpgrade gnome-menus-branding-basedonopensuseUpgrade leechcraft-azoth-hiliUpgrade leechcraft-launchyUpgrade pidgin-otrUpgrade pidgin-embeddedvideoUpgrade leechcraft-dumbeepUpgrade leechcraft-cstpUpgrade leechcraft-azoth-embedmediaUpgrade leechcraft-docUpgrade gtk3-branding-basedonopensuseUpgrade leechcraft-hotsensorsUpgrade leechcraft-monocle-fxbUpgrade leechcraft-lmp-graffitiUpgrade grub2-branding-basedonopensuseUpgrade yast2-qt-branding-basedonopensuseUpgrade leechcraft-aggregator-bodyfetchUpgrade leechcraft-azothUpgrade leechcraft-pintabUpgrade leechcraft-syncerUpgrade pidginUpgrade leechcraft-poshuku-cleanwebUpgrade leechcraft-kinotifyUpgrade leechcraft-lmp-dumbsyncUpgrade systemd-presets-branding-basedonopensuseUpgrade libpurple-branding-basedonopensuseUpgrade leechcraft-azoth-zheetUpgrade leechcraft-auscrieUpgrade leechcraft-xproxyUpgrade leechcraft-secmanUpgrade leechcraft-azoth-vaderUpgrade gdm-branding-basedonopensuseUpgrade xfce4-notifyd-branding-basedonopensuseUpgrade leechcraft-azoth-lastseenUpgrade leechcraft-poshuku-keywordsUpgrade leechcraft-tabsessionmanagerUpgrade susegreeter-branding-basedonopensuseUpgrade kdelibs4-branding-basedonopensuseUpgrade kdm-branding-basedonopensuseUpgrade libpurple-develUpgrade kdebase4-workspace-branding-basedonopensuseUpgrade leechcraft-develUpgrade yast2-branding-basedonopensuseUpgrade leechcraft-azoth-docUpgrade gcin-branding-basedonopensuseUpgrade leechcraft-monocle-muUpgrade leechcraft-azoth-velvetbirdUpgrade leechcraft-glanceUpgrade leechcraft-azoth-nativeemoticonsUpgrade libpurple-plugin-skypeUpgrade xfwm4-branding-basedonopensuseUpgrade plymouth-branding-basedonopensuseUpgrade libpurple-branding-upstreamUpgrade pidgin-guificationsUpgrade leechcraft-hotstreamsUpgrade wallpaper-branding-basedonopensuseUpgrade libpurple-plugin-facebookchatUpgrade libexo-1-0-branding-basedonopensuseUpgrade thunar-volman-branding-basedonopensuseUpgrade pidgin-facebookchatUpgrade telepathy-hazeUpgrade pidgin-birthday-reminderUpgrade xfdesktop-branding-basedonopensuseUpgrade compiz-branding-basedonopensuseUpgrade leechcraft-poshuku-onlinebookmarksUpgrade leechcraft-azoth-acetamideUpgrade leechcraft-azoth-autoidlerUpgrade leechcraft-azoth-p100qUpgrade leechcraft-azoth-depesterUpgrade purple-plugin-pack-langUpgrade leechcraft-summaryUpgrade libpurple-branding-openSUSEUpgrade leechcraft-azoth-xooxUpgrade leechcraft-newlifeUpgrade leechcraft-lhtrUpgrade sle-sdk-releaseUpgrade libpurple-plugin-openfetionUpgrade leechcraft-gactsUpgrade libpurple-plugin-pack-extrasUpgrade gio-branding-basedonopensuseUpgrade pidgin-openfetionUpgrade xfce4-session-branding-basedonopensuseUpgrade libpurple-plugin-mrim-langUpgrade pidgin-plugin-skypeUpgrade leechcraft-networkmonitorUpgrade leechcraft-azoth-isteriqueUpgrade leechcraft-poshuku-onlinebookmarks-readitlaterUpgrade PackageKit-branding-basedonopensuseUpgrade leechcraft-liznooUpgrade leechcraft-lmpUpgrade leechcraft-poshuku-fileschemeUpgrade libpurple-plugin-packUpgrade leechcraft-azoth-otroidUpgrade hicolor-icon-theme-branding-basedonopensuseUpgrade leechcraft-poshuku-autosearchUpgrade libpurple-plugin-openfetion-langUpgrade leechcraft-lastfmscrobbleUpgrade leechcraft-seekthruUpgrade libpurple-plugin-sipeUpgrade libpurple-plugin-bot-sentryUpgrade leechcraft-blogiqueUpgrade leechcraft-lemonUpgrade leechcraft-vgrabberUpgrade leechcraft-pogooglueUpgrade leechcraft-azoth-juickUpgrade gconf2-branding-basedonopensuseUpgrade leechcraft-lackmanUpgrade leechcraft-azoth-rosenthalUpgrade pidgin-plugin-birthday-reminderUpgrade pidgin-guifications-langUpgrade leechcraft-azoth-metacontactsUpgrade leechcraft-netstoremanagerUpgrade lxde-common-branding-basedonopensuse | Mar 3, 2014 | Feb 6, 2014 |
| Ubuntu | — | Upgrade libpurple0Upgrade pidgin | Nov 8, 2024 | Feb 6, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub