Integer overflow in libpurple/protocols/gg/lib/http.c in the Gadu-Gadu (gg) parser in Pidgin before 2.10.8 allows remote attackers to have an unspecified impact via a large Content-Length value, which triggers a buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade pidgin | Sep 20, 2017 | Feb 6, 2014 |
| Centos_linux | — | Upgrade pidgin-docsUpgrade finch-develUpgrade pidginUpgrade finchUpgrade pidgin-develUpgrade libpurple-tclUpgrade pidgin-perlUpgrade libpurple-perlUpgrade libpurple-develUpgrade libpurple | Dec 1, 2016 | Feb 6, 2014 |
| Debian | — | Upgrade pidginUpgrade libgadu | Jul 30, 2024 | Feb 6, 2014 |
| Gentoo Linux | — | Upgrade net-im/pidgin.Upgrade net-libs/libgadu. | Oct 30, 2017 | Feb 6, 2014 |
| Oracle Solaris | — | Upgrade entire to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2 | May 29, 2017 | Feb 6, 2014 |
| Oracle_linux | — | Upgrade libpurple-tclUpgrade pidginUpgrade libpurple-develUpgrade pidgin-develUpgrade libpurpleUpgrade finchUpgrade pidgin-perlUpgrade finch-develUpgrade pidgin-docsUpgrade libpurple-perl | Oct 16, 2024 | Feb 6, 2014 |
| Suse | — | Upgrade leechcraft-poshuku-fatapeUpgrade leechcraft-poshuku-onlinebookmarks-readitlaterUpgrade libgarcon-branding-basedonopensuseUpgrade leechcraft-vroobyUpgrade leechcraft-choroidUpgrade pidgin-plugin-embeddedvideoUpgrade leechcraft-azoth-keesoUpgrade xfce4-splash-branding-basedonopensuseUpgrade leechcraft-bittorrentUpgrade leechcraft-pogooglueUpgrade leechcraft-azoth-autopasteUpgrade leechcraft-syncerUpgrade leechcraft-azoth-herbicideUpgrade libpurpleUpgrade leechcraft-networkmonitorUpgrade ksplash-qml-branding-basedonopensuseUpgrade pidgin-advanced-sound-notification-langUpgrade leechcraft-launchyUpgrade e17-branding-basedonopensuseUpgrade wallpaper-branding-basedonopensuseUpgrade pidgin-openfetionUpgrade leechcraft-gmailnotifierUpgrade gtk2-branding-basedonopensuseUpgrade leechcraft-netstoremanager-googledriveUpgrade pidgin-plugin-advanced-sound-notificationUpgrade PackageKit-branding-basedonopensuseUpgrade leechcraft-poshuku-onlinebookmarksUpgrade libsocialweb-branding-basedonopensuseUpgrade leechcraft-popishuUpgrade leechcraft-azoth-chathistoryUpgrade leechcraft-vgrabberUpgrade leechcraft-azothUpgrade leechcraft-poshukuUpgrade leechcraft-hotsensorsUpgrade leechcraft-azoth-hiliUpgrade libreoffice-branding-basedonopensuseUpgrade leechcraft-secman-simplestorageUpgrade leechcraft-tpiUpgrade leechcraft-lmp-mp3tunesUpgrade xfwm4-branding-basedonopensuseUpgrade leechcraft-kbswitchUpgrade awesome-branding-basedonopensuseUpgrade leechcraft-azoth-otroidUpgrade kdm-branding-basedonopensuseUpgrade leechcraft-dumbeepUpgrade pidgin-plugin-packUpgrade leechcraft-dolozheeUpgrade leechcraft-azoth-autoidlerUpgrade leechcraft-azoth-rosenthalUpgrade purple-plugin-pack-langUpgrade leechcraft-secmanUpgrade leechcraft-anheroUpgrade leechcraft-monocle-muUpgrade libpurple-plugin-facebookchatUpgrade thunar-volman-branding-basedonopensuseUpgrade libpurple-develUpgrade gconf2-branding-basedonopensuseUpgrade libpurple-plugin-mrim-langUpgrade leechcraft-summaryUpgrade leechcraft-azoth-p100qUpgrade lightdm-gtk-greeter-branding-basedonopensuseUpgrade pidgin-guifications-langUpgrade kdebase3-SuSE-branding-basedonopensuseUpgrade install-initrd-branding-basedonopensuseUpgrade leechcraft-azoth-xtazyUpgrade leechcraft-lastfmscrobbleUpgrade libpurple-plugin-openfetionUpgrade pidginUpgrade finchUpgrade libpurple-meanwhileUpgrade leechcraft-blogique-metidaUpgrade libpurple-branding-basedonopensuseUpgrade libpurple-plugin-skypeUpgrade kdebase4-runtime-branding-basedonopensuseUpgrade leechcraft-seekthruUpgrade epiphany-branding-basedonopensuseUpgrade grub2-branding-basedonopensuseUpgrade gtk3-branding-basedonopensuseUpgrade libxfce4ui-branding-basedonopensuseUpgrade leechcraft-azoth-depesterUpgrade leechcraft-shellopenUpgrade pidgin-plugin-guificationsUpgrade telepathy-plugin-sipeUpgrade kdelibs4-branding-basedonopensuseUpgrade leechcraft-aggregatorUpgrade leechcraft-sb2Upgrade leechcraft-monocle-fxbUpgrade leechcraft-poshuku-autosearchUpgrade pidgin-birthday-reminderUpgrade libpurple-plugin-mrimUpgrade pidgin-sipeUpgrade susegreeter-branding-basedonopensuseUpgrade bot-sentryUpgrade leechcraft-poshuku-fileschemeUpgrade leechcraft-cstpUpgrade leechcraft-lmp-dumbsyncUpgrade libgadu3Upgrade gnome-menus-branding-basedonopensuseUpgrade leechcraft-historyholderUpgrade leechcraft-auscrieUpgrade gio-branding-basedonopensuseUpgrade fcitx-branding-basedonopensuseUpgrade leechcraft-azoth-lastseenUpgrade pidgin-advanced-sound-notificationUpgrade leechcraft-azoth-embedmediaUpgrade libpurple-plugin-pack-extrasUpgrade leechcraft-monocle-pdfUpgrade leechcraft-kinotifyUpgrade leechcraft-shaitanUpgrade libpurple-plugin-packUpgrade leechcraft-monocleUpgrade hicolor-icon-theme-branding-basedonopensuseUpgrade leechcraft-pintabUpgrade pidgin-birthday-reminder-langUpgrade leechcraft-newlifeUpgrade leechcraft-docUpgrade pidgin-mrimUpgrade leechcraft-netstoremanagerUpgrade pidgin-branding-openSUSEUpgrade leechcraft-azoth-velvetbirdUpgrade leechcraft-azoth-isteriqueUpgrade leechcraft-poshuku-cleanwebUpgrade leechcraft-knowhowUpgrade splashy-branding-basedonopensuseUpgrade leechcraft-poshuku-onlinebookmarks-deliciousUpgrade xfdesktop-branding-basedonopensuseUpgrade pidgin-embeddedvideoUpgrade compiz-branding-basedonopensuseUpgrade finch-develUpgrade leechcraft-monocle-docUpgrade leechcraft-monocle-postrusUpgrade leechcraft-lhtrUpgrade libpurple-plugin-bot-sentry-langUpgrade leechcraft-azoth-xooxUpgrade libpurple-plugin-skype-langUpgrade leechcraft-tabslistUpgrade branding-basedonopensuseUpgrade leechcraft-musiczombieUpgrade leechcraft-azoth-nativeemoticonsUpgrade telepathy-hazeUpgrade xfce4-notifyd-branding-basedonopensuseUpgrade yast2-branding-basedonopensuseUpgrade leechcraft-gactsUpgrade libgadu-develUpgrade leechcraft-touchstreamsUpgrade libpurple-plugin-bot-sentryUpgrade xfce4-panel-branding-basedonopensuseUpgrade MozillaFirefox-branding-basedonopensuseUpgrade sle-sdk-releaseUpgrade pidgin-plugin-skypeUpgrade leechcraft-blogiqueUpgrade leechcraft-aggregator-bodyfetchUpgrade gcin-branding-basedonopensuseUpgrade leechcraft-poshuku-fuaUpgrade leechcraft-dbusmanagerUpgrade libexo-1-0-branding-basedonopensuseUpgrade leechcraft-deadlyricsUpgrade xfce4-session-branding-basedonopensuseUpgrade leechcraft-lackmanUpgrade libpurple-plugin-openfetion-langUpgrade leechcraft-glanceUpgrade pidgin-guificationsUpgrade pidgin-otrUpgrade leechcraft-azoth-juickUpgrade leechcraft-poshuku-keywordsUpgrade leechcraft-lmp-graffitiUpgrade plymouth-branding-basedonopensuseUpgrade libpurple-langUpgrade leechcraft-otlozhuUpgrade leechcraft-monocle-seenUpgrade leechcraft-azoth-adiumstylesUpgrade midori-branding-basedonopensuseUpgrade xfce4-settings-branding-basedonopensuseUpgrade leechcraft-azoth-metacontactsUpgrade leechcraft-lemonUpgrade pidgin-plugin-pack-extrasUpgrade leechcraft-azoth-vaderUpgrade leechcraft-develUpgrade gfxboot-branding-basedonopensuseUpgrade leechcraft-blogique-hestiaUpgrade purple-plugin-packUpgrade pidgin-facebookchatUpgrade libpurple-branding-upstreamUpgrade leechcraftUpgrade leechcraft-liznooUpgrade leechcraft-lmpUpgrade lxde-common-branding-basedonopensuseUpgrade leechcraft-azoth-modnokUpgrade leechcraft-azoth-birthdaynotifierUpgrade leechcraft-azoth-standardstylesUpgrade leechcraft-advancednotificationsUpgrade skype4pidginUpgrade libpurple-branding-openSUSEUpgrade libpurple-tclUpgrade leechcraft-azoth-acetamideUpgrade libgaduUpgrade leechcraft-azoth-docUpgrade kdebase4-workspace-branding-basedonopensuseUpgrade gdm-branding-basedonopensuseUpgrade pidgin-plugin-birthday-reminderUpgrade leechcraft-tabsessionmanagerUpgrade dynamic-wallpaper-branding-basedonopensuseUpgrade leechcraft-hotstreamsUpgrade leechcraft-xproxyUpgrade leechcraft-azoth-shxUpgrade pidgin-develUpgrade yast2-qt-branding-basedonopensuseUpgrade ksplashx-branding-basedonopensuseUpgrade leechcraft-azoth-zheetUpgrade libpurple-plugin-sipeUpgrade systemd-presets-branding-basedonopensuse | Mar 3, 2014 | Feb 6, 2014 |
| Ubuntu | — | Upgrade pidginUpgrade libgadu3Upgrade libpurple0 | Nov 8, 2024 | Feb 6, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub