The XMPP protocol plugin in libpurple in Pidgin before 2.10.8 does not properly determine whether the from address in an iq reply is consistent with the to address in an iq request, which allows remote attackers to spoof iq traffic or cause a denial of service (NULL pointer dereference and application crash) via a crafted reply.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade pidgin | Sep 20, 2017 | Feb 6, 2014 |
| Centos_linux | — | Upgrade pidginUpgrade libpurpleUpgrade finchUpgrade finch-develUpgrade pidgin-develUpgrade pidgin-perlUpgrade pidgin-docsUpgrade libpurple-develUpgrade libpurple-perlUpgrade libpurple-tcl | Dec 1, 2016 | Feb 6, 2014 |
| Debian | — | Upgrade pidgin | Jul 30, 2024 | Feb 6, 2014 |
| Gentoo Linux | — | Upgrade net-im/pidgin. | Oct 30, 2017 | Feb 6, 2014 |
| Oracle Solaris | — | Upgrade entire to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2 | May 29, 2017 | Feb 6, 2014 |
| Oracle_linux | — | Upgrade pidginUpgrade libpurple-develUpgrade libpurple-tclUpgrade libpurpleUpgrade finchUpgrade pidgin-develUpgrade pidgin-docsUpgrade finch-develUpgrade pidgin-perlUpgrade libpurple-perl | Oct 16, 2024 | Feb 6, 2014 |
| Suse | — | Upgrade libpurple-plugin-openfetion-langUpgrade leechcraft-poshuku-onlinebookmarksUpgrade leechcraft-newlifeUpgrade leechcraft-summaryUpgrade sle-sdk-releaseUpgrade hicolor-icon-theme-branding-basedonopensuseUpgrade kdm-branding-basedonopensuseUpgrade kdelibs4-branding-basedonopensuseUpgrade leechcraft-poshuku-keywordsUpgrade gconf2-branding-basedonopensuseUpgrade pidgin-plugin-birthday-reminderUpgrade leechcraft-azoth-rosenthalUpgrade libpurple-plugin-sipeUpgrade leechcraft-blogiqueUpgrade leechcraft-lemonUpgrade kdebase4-workspace-branding-basedonopensuseUpgrade leechcraft-seekthruUpgrade leechcraft-networkmonitorUpgrade leechcraft-dumbeepUpgrade pidgin-embeddedvideoUpgrade plymouth-branding-basedonopensuseUpgrade leechcraft-aggregator-bodyfetchUpgrade gio-branding-basedonopensuseUpgrade pidginUpgrade leechcraft-azoth-otroidUpgrade leechcraft-poshuku-fileschemeUpgrade leechcraft-azoth-isteriqueUpgrade yast2-qt-branding-basedonopensuseUpgrade leechcraft-xproxyUpgrade leechcraft-lmpUpgrade telepathy-hazeUpgrade leechcraft-liznooUpgrade pidgin-guificationsUpgrade libpurple-plugin-packUpgrade compiz-branding-basedonopensuseUpgrade susegreeter-branding-basedonopensuseUpgrade libexo-1-0-branding-basedonopensuseUpgrade leechcraft-lhtrUpgrade leechcraft-glanceUpgrade leechcraft-azoth-nativeemoticonsUpgrade leechcraft-pogooglueUpgrade libpurple-plugin-bot-sentryUpgrade libpurple-plugin-mrim-langUpgrade leechcraft-azoth-acetamideUpgrade libpurple-plugin-openfetionUpgrade libpurple-plugin-facebookchatUpgrade PackageKit-branding-basedonopensuseUpgrade leechcraft-azoth-lastseenUpgrade leechcraft-auscrieUpgrade lxde-common-branding-basedonopensuseUpgrade pidgin-facebookchatUpgrade xfdesktop-branding-basedonopensuseUpgrade leechcraft-azoth-juickUpgrade libpurple-branding-basedonopensuseUpgrade systemd-presets-branding-basedonopensuseUpgrade leechcraft-lastfmscrobbleUpgrade leechcraft-vgrabberUpgrade leechcraft-poshuku-cleanwebUpgrade leechcraft-azoth-metacontactsUpgrade leechcraft-azothUpgrade leechcraft-poshuku-autosearchUpgrade leechcraft-azoth-depesterUpgrade leechcraft-azoth-velvetbirdUpgrade libpurple-branding-upstreamUpgrade leechcraft-tabsessionmanagerUpgrade leechcraft-lackmanUpgrade leechcraft-azoth-autoidlerUpgrade leechcraft-azoth-xooxUpgrade wallpaper-branding-basedonopensuseUpgrade leechcraft-hotsensorsUpgrade purple-plugin-pack-langUpgrade grub2-branding-basedonopensuseUpgrade leechcraft-syncerUpgrade leechcraft-cstpUpgrade gtk3-branding-basedonopensuseUpgrade leechcraft-poshuku-onlinebookmarks-readitlaterUpgrade leechcraft-hotstreamsUpgrade leechcraft-monocle-muUpgrade libpurple-plugin-pack-extrasUpgrade pidgin-birthday-reminderUpgrade leechcraft-azoth-zheetUpgrade libpurple-develUpgrade pidgin-plugin-skypeUpgrade xfce4-session-branding-basedonopensuseUpgrade xfce4-notifyd-branding-basedonopensuseUpgrade leechcraft-pintabUpgrade leechcraft-kinotifyUpgrade leechcraft-azoth-p100qUpgrade libpurple-plugin-skypeUpgrade leechcraft-docUpgrade pidgin-openfetionUpgrade leechcraft-monocle-fxbUpgrade leechcraft-lmp-graffitiUpgrade thunar-volman-branding-basedonopensuseUpgrade libpurple-branding-openSUSEUpgrade leechcraft-develUpgrade leechcraft-azoth-docUpgrade leechcraft-netstoremanagerUpgrade leechcraft-azoth-vaderUpgrade leechcraft-azoth-embedmediaUpgrade pidgin-guifications-langUpgrade gdm-branding-basedonopensuseUpgrade leechcraft-secmanUpgrade leechcraft-lmp-dumbsyncUpgrade leechcraft-gactsUpgrade xfwm4-branding-basedonopensuseUpgrade pidgin-otrUpgrade yast2-branding-basedonopensuseUpgrade gcin-branding-basedonopensuseUpgrade leechcraft-launchyUpgrade pidgin-develUpgrade libsocialweb-branding-basedonopensuseUpgrade leechcraft-tpiUpgrade leechcraft-azoth-hiliUpgrade leechcraft-choroidUpgrade branding-basedonopensuseUpgrade ksplash-qml-branding-basedonopensuseUpgrade gnome-menus-branding-basedonopensuseUpgrade pidgin-branding-openSUSEUpgrade leechcraftUpgrade libpurple-plugin-bot-sentry-langUpgrade leechcraft-azoth-keesoUpgrade leechcraft-knowhowUpgrade leechcraft-advancednotificationsUpgrade leechcraft-tabslistUpgrade leechcraft-bittorrentUpgrade leechcraft-azoth-shxUpgrade libxfce4ui-branding-basedonopensuseUpgrade leechcraft-shaitanUpgrade leechcraft-dbusmanagerUpgrade pidgin-birthday-reminder-langUpgrade leechcraft-netstoremanager-googledriveUpgrade libpurple-plugin-mrimUpgrade telepathy-plugin-sipeUpgrade skype4pidginUpgrade kdebase3-SuSE-branding-basedonopensuseUpgrade libpurple-tclUpgrade awesome-branding-basedonopensuseUpgrade leechcraft-azoth-standardstylesUpgrade pidgin-mrimUpgrade leechcraft-deadlyricsUpgrade leechcraft-poshuku-onlinebookmarks-deliciousUpgrade leechcraft-poshuku-fuaUpgrade pidgin-sipeUpgrade leechcraft-shellopenUpgrade leechcraft-dolozheeUpgrade e17-branding-basedonopensuseUpgrade finchUpgrade leechcraft-monocle-pdfUpgrade bot-sentryUpgrade dynamic-wallpaper-branding-basedonopensuseUpgrade leechcraft-anheroUpgrade leechcraft-gmailnotifierUpgrade purple-plugin-packUpgrade leechcraft-musiczombieUpgrade gtk2-branding-basedonopensuseUpgrade leechcraft-aggregatorUpgrade leechcraft-sb2Upgrade leechcraft-monocle-docUpgrade pidgin-plugin-advanced-sound-notificationUpgrade leechcraft-monocleUpgrade lightdm-gtk-greeter-branding-basedonopensuseUpgrade leechcraft-historyholderUpgrade libpurple-meanwhileUpgrade leechcraft-azoth-autopasteUpgrade leechcraft-azoth-modnokUpgrade splashy-branding-basedonopensuseUpgrade leechcraft-azoth-birthdaynotifierUpgrade xfce4-splash-branding-basedonopensuseUpgrade libreoffice-branding-basedonopensuseUpgrade pidgin-plugin-packUpgrade gfxboot-branding-basedonopensuseUpgrade pidgin-plugin-embeddedvideoUpgrade leechcraft-azoth-adiumstylesUpgrade libgarcon-branding-basedonopensuseUpgrade fcitx-branding-basedonopensuseUpgrade pidgin-advanced-sound-notification-langUpgrade leechcraft-otlozhuUpgrade leechcraft-blogique-metidaUpgrade leechcraft-monocle-seenUpgrade leechcraft-azoth-xtazyUpgrade ksplashx-branding-basedonopensuseUpgrade pidgin-plugin-pack-extrasUpgrade leechcraft-monocle-postrusUpgrade leechcraft-popishuUpgrade install-initrd-branding-basedonopensuseUpgrade leechcraft-azoth-chathistoryUpgrade MozillaFirefox-branding-basedonopensuseUpgrade kdebase4-runtime-branding-basedonopensuseUpgrade leechcraft-poshuku-fatapeUpgrade epiphany-branding-basedonopensuseUpgrade leechcraft-poshukuUpgrade libpurpleUpgrade leechcraft-blogique-hestiaUpgrade pidgin-plugin-guificationsUpgrade leechcraft-lmp-mp3tunesUpgrade midori-branding-basedonopensuseUpgrade libpurple-plugin-skype-langUpgrade leechcraft-secman-simplestorageUpgrade leechcraft-azoth-herbicideUpgrade libpurple-langUpgrade leechcraft-touchstreamsUpgrade xfce4-panel-branding-basedonopensuseUpgrade leechcraft-vroobyUpgrade xfce4-settings-branding-basedonopensuseUpgrade finch-develUpgrade leechcraft-kbswitchUpgrade pidgin-advanced-sound-notification | Mar 3, 2014 | Feb 6, 2014 |
| Ubuntu | — | Upgrade libpurple0Upgrade pidgin | Nov 8, 2024 | Feb 6, 2014 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub