Buffer overflow in util.c in libpurple in Pidgin before 2.10.8 allows remote HTTP servers to cause a denial of service (application crash) or possibly have unspecified other impact via an invalid chunk-size field in chunked transfer-coding data.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade pidgin | Sep 20, 2017 | Feb 6, 2014 |
| Centos_linux | — | Upgrade libpurpleUpgrade finchUpgrade finch-develUpgrade pidgin-develUpgrade pidginUpgrade libpurple-develUpgrade pidgin-docsUpgrade libpurple-tclUpgrade pidgin-perlUpgrade libpurple-perl | Dec 1, 2016 | Feb 6, 2014 |
| Debian | — | Upgrade pidgin | Jul 30, 2024 | Feb 6, 2014 |
| Gentoo Linux | — | Upgrade net-im/pidgin. | Oct 30, 2017 | Feb 6, 2014 |
| Oracle Solaris | — | Upgrade entire to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2 | May 29, 2017 | Feb 6, 2014 |
| Oracle_linux | — | Upgrade finchUpgrade pidgin-docsUpgrade libpurpleUpgrade pidgin-develUpgrade libpurple-develUpgrade libpurple-tclUpgrade libpurple-perlUpgrade pidgin-perlUpgrade pidginUpgrade finch-devel | Oct 16, 2024 | Feb 6, 2014 |
| Suse | — | Upgrade leechcraft-azoth-autopasteUpgrade leechcraft-monocle-pdfUpgrade libxfce4ui-branding-basedonopensuseUpgrade leechcraft-sb2Upgrade branding-basedonopensuseUpgrade pidgin-plugin-packUpgrade dynamic-wallpaper-branding-basedonopensuseUpgrade libpurple-branding-upstreamUpgrade MozillaFirefox-branding-basedonopensuseUpgrade gnome-menus-branding-basedonopensuseUpgrade leechcraft-azoth-lastseenUpgrade leechcraft-monocleUpgrade finchUpgrade leechcraft-blogique-metidaUpgrade libpurple-plugin-skype-langUpgrade leechcraft-azoth-chathistoryUpgrade pidgin-plugin-pack-extrasUpgrade leechcraft-advancednotificationsUpgrade leechcraft-azoth-herbicideUpgrade finch-develUpgrade telepathy-plugin-sipeUpgrade gfxboot-branding-basedonopensuseUpgrade skype4pidginUpgrade pidgin-plugin-guificationsUpgrade kdebase4-runtime-branding-basedonopensuseUpgrade leechcraft-bittorrentUpgrade leechcraft-azoth-keesoUpgrade leechcraftUpgrade leechcraft-otlozhuUpgrade pidgin-birthday-reminderUpgrade leechcraft-lmp-mp3tunesUpgrade leechcraft-monocle-seenUpgrade pidgin-plugin-embeddedvideoUpgrade leechcraft-azoth-standardstylesUpgrade leechcraft-vgrabberUpgrade kdebase3-SuSE-branding-basedonopensuseUpgrade leechcraft-aggregatorUpgrade leechcraft-monocle-postrusUpgrade leechcraft-netstoremanager-googledriveUpgrade e17-branding-basedonopensuseUpgrade leechcraft-azoth-modnokUpgrade pidgin-sipeUpgrade pidgin-mrimUpgrade bot-sentryUpgrade ksplashx-branding-basedonopensuseUpgrade leechcraft-azoth-adiumstylesUpgrade leechcraft-popishuUpgrade leechcraft-vroobyUpgrade purple-plugin-packUpgrade leechcraft-secman-simplestorageUpgrade leechcraft-azoth-birthdaynotifierUpgrade gconf2-branding-basedonopensuseUpgrade leechcraft-dolozheeUpgrade leechcraft-choroidUpgrade gtk2-branding-basedonopensuseUpgrade leechcraft-lemonUpgrade splashy-branding-basedonopensuseUpgrade leechcraft-poshuku-fuaUpgrade leechcraft-deadlyricsUpgrade install-initrd-branding-basedonopensuseUpgrade ksplash-qml-branding-basedonopensuseUpgrade pidgin-birthday-reminder-langUpgrade libpurple-plugin-mrimUpgrade pidgin-branding-openSUSEUpgrade libpurple-tclUpgrade pidgin-advanced-sound-notification-langUpgrade xfce4-splash-branding-basedonopensuseUpgrade leechcraft-azoth-hiliUpgrade leechcraft-anheroUpgrade leechcraft-historyholderUpgrade xfce4-panel-branding-basedonopensuseUpgrade leechcraft-shaitanUpgrade pidgin-advanced-sound-notificationUpgrade xfce4-settings-branding-basedonopensuseUpgrade midori-branding-basedonopensuseUpgrade libreoffice-branding-basedonopensuseUpgrade leechcraft-netstoremanagerUpgrade leechcraft-azoth-otroidUpgrade leechcraft-poshukuUpgrade libgarcon-branding-basedonopensuseUpgrade leechcraft-azoth-shxUpgrade libsocialweb-branding-basedonopensuseUpgrade libpurple-plugin-facebookchatUpgrade pidgin-plugin-advanced-sound-notificationUpgrade leechcraft-poshuku-onlinebookmarks-deliciousUpgrade libpurple-meanwhileUpgrade leechcraft-musiczombieUpgrade leechcraft-blogiqueUpgrade epiphany-branding-basedonopensuseUpgrade fcitx-branding-basedonopensuseUpgrade leechcraft-gmailnotifierUpgrade leechcraft-touchstreamsUpgrade leechcraft-tabslistUpgrade pidgin-develUpgrade libpurple-langUpgrade leechcraft-tpiUpgrade leechcraft-blogique-hestiaUpgrade gcin-branding-basedonopensuseUpgrade leechcraft-monocle-docUpgrade leechcraft-azoth-xtazyUpgrade yast2-branding-basedonopensuseUpgrade leechcraft-secmanUpgrade leechcraft-poshuku-cleanwebUpgrade leechcraft-azothUpgrade libpurple-plugin-packUpgrade libpurple-plugin-mrim-langUpgrade leechcraft-poshuku-fileschemeUpgrade leechcraft-aggregator-bodyfetchUpgrade leechcraft-azoth-metacontactsUpgrade sle-sdk-releaseUpgrade libpurple-plugin-skypeUpgrade xfdesktop-branding-basedonopensuseUpgrade telepathy-hazeUpgrade leechcraft-gactsUpgrade leechcraft-poshuku-onlinebookmarks-readitlaterUpgrade leechcraft-hotstreamsUpgrade leechcraft-auscrieUpgrade leechcraft-shellopenUpgrade leechcraft-azoth-rosenthalUpgrade leechcraft-lmp-dumbsyncUpgrade leechcraft-azoth-xooxUpgrade xfce4-session-branding-basedonopensuseUpgrade libpurple-develUpgrade leechcraft-azoth-velvetbirdUpgrade leechcraft-lackmanUpgrade leechcraft-launchyUpgrade leechcraft-azoth-juickUpgrade kdelibs4-branding-basedonopensuseUpgrade leechcraft-kinotifyUpgrade leechcraft-poshuku-keywordsUpgrade gio-branding-basedonopensuseUpgrade plymouth-branding-basedonopensuseUpgrade libpurpleUpgrade xfwm4-branding-basedonopensuseUpgrade yast2-qt-branding-basedonopensuseUpgrade lightdm-gtk-greeter-branding-basedonopensuseUpgrade pidgin-plugin-birthday-reminderUpgrade libpurple-plugin-openfetion-langUpgrade leechcraft-azoth-depesterUpgrade leechcraft-tabsessionmanagerUpgrade purple-plugin-pack-langUpgrade leechcraft-azoth-embedmediaUpgrade leechcraft-azoth-nativeemoticonsUpgrade pidgin-otrUpgrade gdm-branding-basedonopensuseUpgrade libpurple-branding-basedonopensuseUpgrade pidgin-embeddedvideoUpgrade leechcraft-poshuku-fatapeUpgrade xfce4-notifyd-branding-basedonopensuseUpgrade leechcraft-poshuku-autosearchUpgrade leechcraft-kbswitchUpgrade leechcraft-xproxyUpgrade leechcraft-lhtrUpgrade libexo-1-0-branding-basedonopensuseUpgrade compiz-branding-basedonopensuseUpgrade pidgin-openfetionUpgrade libpurple-plugin-pack-extrasUpgrade leechcraft-seekthruUpgrade leechcraft-lastfmscrobbleUpgrade kdebase4-workspace-branding-basedonopensuseUpgrade thunar-volman-branding-basedonopensuseUpgrade leechcraft-azoth-isteriqueUpgrade leechcraft-docUpgrade leechcraft-glanceUpgrade libpurple-plugin-bot-sentryUpgrade libpurple-plugin-openfetionUpgrade leechcraft-azoth-vaderUpgrade awesome-branding-basedonopensuseUpgrade libpurple-plugin-sipeUpgrade systemd-presets-branding-basedonopensuseUpgrade libpurple-branding-openSUSEUpgrade leechcraft-cstpUpgrade leechcraft-lmp-graffitiUpgrade PackageKit-branding-basedonopensuseUpgrade leechcraft-liznooUpgrade leechcraft-monocle-fxbUpgrade wallpaper-branding-basedonopensuseUpgrade kdm-branding-basedonopensuseUpgrade gtk3-branding-basedonopensuseUpgrade leechcraft-summaryUpgrade leechcraft-azoth-p100qUpgrade leechcraft-lmpUpgrade leechcraft-azoth-acetamideUpgrade leechcraft-pogooglueUpgrade leechcraft-monocle-muUpgrade grub2-branding-basedonopensuseUpgrade leechcraft-knowhowUpgrade leechcraft-poshuku-onlinebookmarksUpgrade leechcraft-networkmonitorUpgrade lxde-common-branding-basedonopensuseUpgrade leechcraft-pintabUpgrade pidgin-plugin-skypeUpgrade leechcraft-develUpgrade leechcraft-azoth-zheetUpgrade pidginUpgrade susegreeter-branding-basedonopensuseUpgrade pidgin-guifications-langUpgrade leechcraft-dumbeepUpgrade pidgin-guificationsUpgrade leechcraft-hotsensorsUpgrade leechcraft-dbusmanagerUpgrade leechcraft-azoth-autoidlerUpgrade leechcraft-syncerUpgrade leechcraft-azoth-docUpgrade libpurple-plugin-bot-sentry-langUpgrade hicolor-icon-theme-branding-basedonopensuseUpgrade leechcraft-newlifeUpgrade pidgin-facebookchat | Mar 3, 2014 | Feb 6, 2014 |
| Ubuntu | — | Upgrade libpurple0Upgrade pidgin | Nov 8, 2024 | Feb 6, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub