The STUN protocol implementation in libpurple in Pidgin before 2.10.8 allows remote STUN servers to cause a denial of service (out-of-bounds write operation and application crash) by triggering a socket read error.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade pidgin | Sep 20, 2017 | Feb 6, 2014 |
| Centos_linux | — | Upgrade finch-develUpgrade pidgin-perlUpgrade pidgin-docsUpgrade libpurple-tclUpgrade libpurple-develUpgrade finchUpgrade pidginUpgrade pidgin-develUpgrade libpurple-perlUpgrade libpurple | Dec 1, 2016 | Feb 6, 2014 |
| Debian | — | Upgrade pidgin | Jul 30, 2024 | Feb 6, 2014 |
| Gentoo Linux | — | Upgrade net-im/pidgin. | Oct 30, 2017 | Feb 6, 2014 |
| Oracle Solaris | — | Upgrade entire to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2 | May 29, 2017 | Feb 6, 2014 |
| Oracle_linux | — | Upgrade pidgin-develUpgrade finch-develUpgrade pidgin-docsUpgrade libpurpleUpgrade pidgin-perlUpgrade libpurple-perlUpgrade libpurple-tclUpgrade finchUpgrade pidginUpgrade libpurple-devel | Oct 16, 2024 | Feb 6, 2014 |
| Suse | — | Upgrade epiphany-branding-basedonopensuseUpgrade kdebase4-workspace-branding-basedonopensuseUpgrade bot-sentryUpgrade leechcraft-knowhowUpgrade libpurple-branding-openSUSEUpgrade leechcraft-monocle-pdfUpgrade leechcraft-tabslistUpgrade libpurple-plugin-bot-sentryUpgrade leechcraft-azoth-adiumstylesUpgrade leechcraft-azoth-p100qUpgrade pidgin-guificationsUpgrade libgarcon-branding-basedonopensuseUpgrade kdelibs4-branding-basedonopensuseUpgrade leechcraft-newlifeUpgrade pidgin-advanced-sound-notification-langUpgrade leechcraft-monocle-postrusUpgrade leechcraft-seekthruUpgrade yast2-qt-branding-basedonopensuseUpgrade leechcraft-advancednotificationsUpgrade leechcraft-gmailnotifierUpgrade libpurple-plugin-skype-langUpgrade leechcraft-azoth-juickUpgrade telepathy-plugin-sipeUpgrade pidgin-plugin-guificationsUpgrade leechcraft-shaitanUpgrade leechcraft-azoth-xooxUpgrade leechcraft-historyholderUpgrade hicolor-icon-theme-branding-basedonopensuseUpgrade xfce4-settings-branding-basedonopensuseUpgrade leechcraft-azoth-keesoUpgrade pidgin-branding-openSUSEUpgrade leechcraft-lemonUpgrade leechcraft-develUpgrade grub2-branding-basedonopensuseUpgrade leechcraft-choroidUpgrade libpurple-plugin-mrim-langUpgrade leechcraft-aggregatorUpgrade xfce4-panel-branding-basedonopensuseUpgrade leechcraft-azoth-standardstylesUpgrade PackageKit-branding-basedonopensuseUpgrade leechcraft-azothUpgrade kdm-branding-basedonopensuseUpgrade leechcraft-vgrabberUpgrade leechcraft-azoth-modnokUpgrade pidgin-birthday-reminderUpgrade leechcraft-dolozheeUpgrade libpurple-plugin-mrimUpgrade pidgin-advanced-sound-notificationUpgrade leechcraft-lmpUpgrade leechcraft-lmp-dumbsyncUpgrade leechcraft-syncerUpgrade leechcraft-azoth-nativeemoticonsUpgrade pidgin-birthday-reminder-langUpgrade purple-plugin-packUpgrade xfce4-splash-branding-basedonopensuseUpgrade leechcraft-azoth-hiliUpgrade libreoffice-branding-basedonopensuseUpgrade leechcraft-bittorrentUpgrade leechcraft-azoth-autoidlerUpgrade libpurple-plugin-bot-sentry-langUpgrade gtk2-branding-basedonopensuseUpgrade pidgin-plugin-pack-extrasUpgrade leechcraft-lhtrUpgrade leechcraft-blogique-hestiaUpgrade pidgin-guifications-langUpgrade leechcraft-vroobyUpgrade leechcraft-azoth-rosenthalUpgrade e17-branding-basedonopensuseUpgrade leechcraftUpgrade leechcraft-azoth-shxUpgrade pidgin-plugin-advanced-sound-notificationUpgrade leechcraft-netstoremanagerUpgrade leechcraft-poshuku-fileschemeUpgrade leechcraft-poshukuUpgrade xfdesktop-branding-basedonopensuseUpgrade leechcraft-secman-simplestorageUpgrade kdebase4-runtime-branding-basedonopensuseUpgrade leechcraft-liznooUpgrade gcin-branding-basedonopensuseUpgrade leechcraft-netstoremanager-googledriveUpgrade leechcraft-blogiqueUpgrade leechcraft-networkmonitorUpgrade install-initrd-branding-basedonopensuseUpgrade libpurple-branding-upstreamUpgrade leechcraft-azoth-herbicideUpgrade libpurple-develUpgrade leechcraft-azoth-lastseenUpgrade kdebase3-SuSE-branding-basedonopensuseUpgrade pidgin-plugin-packUpgrade lxde-common-branding-basedonopensuseUpgrade pidgin-plugin-embeddedvideoUpgrade wallpaper-branding-basedonopensuseUpgrade leechcraft-blogique-metidaUpgrade leechcraft-hotstreamsUpgrade leechcraft-gactsUpgrade leechcraft-lastfmscrobbleUpgrade leechcraft-azoth-autopasteUpgrade leechcraft-xproxyUpgrade pidginUpgrade leechcraft-azoth-metacontactsUpgrade libpurple-meanwhileUpgrade leechcraft-tabsessionmanagerUpgrade pidgin-facebookchatUpgrade pidgin-plugin-birthday-reminderUpgrade leechcraft-auscrieUpgrade leechcraft-poshuku-cleanwebUpgrade leechcraft-poshuku-fuaUpgrade libxfce4ui-branding-basedonopensuseUpgrade pidgin-sipeUpgrade libpurple-branding-basedonopensuseUpgrade leechcraft-cstpUpgrade libpurple-langUpgrade leechcraft-monocle-seenUpgrade midori-branding-basedonopensuseUpgrade leechcraft-dumbeepUpgrade libpurple-plugin-sipeUpgrade gconf2-branding-basedonopensuseUpgrade leechcraft-monocle-muUpgrade MozillaFirefox-branding-basedonopensuseUpgrade leechcraft-aggregator-bodyfetchUpgrade libpurple-plugin-pack-extrasUpgrade leechcraft-secmanUpgrade ksplash-qml-branding-basedonopensuseUpgrade leechcraft-azoth-depesterUpgrade leechcraft-tpiUpgrade leechcraft-anheroUpgrade compiz-branding-basedonopensuseUpgrade plymouth-branding-basedonopensuseUpgrade leechcraft-monocle-docUpgrade leechcraft-azoth-otroidUpgrade leechcraft-azoth-embedmediaUpgrade leechcraft-docUpgrade libpurple-plugin-facebookchatUpgrade leechcraft-touchstreamsUpgrade leechcraft-poshuku-autosearchUpgrade leechcraft-azoth-xtazyUpgrade telepathy-hazeUpgrade leechcraft-dbusmanagerUpgrade leechcraft-deadlyricsUpgrade leechcraft-lmp-mp3tunesUpgrade ksplashx-branding-basedonopensuseUpgrade xfce4-session-branding-basedonopensuseUpgrade susegreeter-branding-basedonopensuseUpgrade leechcraft-azoth-docUpgrade pidgin-develUpgrade leechcraft-glanceUpgrade leechcraft-azoth-isteriqueUpgrade leechcraft-monocleUpgrade splashy-branding-basedonopensuseUpgrade leechcraft-azoth-vaderUpgrade gfxboot-branding-basedonopensuseUpgrade libexo-1-0-branding-basedonopensuseUpgrade systemd-presets-branding-basedonopensuseUpgrade leechcraft-azoth-velvetbirdUpgrade branding-basedonopensuseUpgrade leechcraft-azoth-zheetUpgrade leechcraft-pintabUpgrade finchUpgrade leechcraft-poshuku-onlinebookmarks-readitlaterUpgrade leechcraft-lackmanUpgrade leechcraft-hotsensorsUpgrade libpurple-plugin-openfetionUpgrade thunar-volman-branding-basedonopensuseUpgrade fcitx-branding-basedonopensuseUpgrade pidgin-mrimUpgrade leechcraft-monocle-fxbUpgrade leechcraft-poshuku-keywordsUpgrade gtk3-branding-basedonopensuseUpgrade libpurple-plugin-packUpgrade leechcraft-lmp-graffitiUpgrade leechcraft-kinotifyUpgrade leechcraft-poshuku-onlinebookmarks-deliciousUpgrade libpurple-tclUpgrade gdm-branding-basedonopensuseUpgrade pidgin-otrUpgrade leechcraft-otlozhuUpgrade sle-sdk-releaseUpgrade libpurpleUpgrade leechcraft-azoth-chathistoryUpgrade leechcraft-poshuku-onlinebookmarksUpgrade libsocialweb-branding-basedonopensuseUpgrade leechcraft-musiczombieUpgrade leechcraft-azoth-acetamideUpgrade skype4pidginUpgrade leechcraft-sb2Upgrade pidgin-embeddedvideoUpgrade pidgin-plugin-skypeUpgrade leechcraft-summaryUpgrade libpurple-plugin-skypeUpgrade leechcraft-pogooglueUpgrade finch-develUpgrade lightdm-gtk-greeter-branding-basedonopensuseUpgrade leechcraft-shellopenUpgrade gnome-menus-branding-basedonopensuseUpgrade xfwm4-branding-basedonopensuseUpgrade pidgin-openfetionUpgrade xfce4-notifyd-branding-basedonopensuseUpgrade leechcraft-launchyUpgrade dynamic-wallpaper-branding-basedonopensuseUpgrade leechcraft-azoth-birthdaynotifierUpgrade gio-branding-basedonopensuseUpgrade yast2-branding-basedonopensuseUpgrade leechcraft-kbswitchUpgrade purple-plugin-pack-langUpgrade libpurple-plugin-openfetion-langUpgrade leechcraft-poshuku-fatapeUpgrade leechcraft-popishuUpgrade awesome-branding-basedonopensuse | Mar 3, 2014 | Feb 6, 2014 |
| Ubuntu | — | Upgrade pidginUpgrade libpurple0 | Nov 8, 2024 | Feb 6, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub