The SIMPLE protocol functionality in Pidgin before 2.10.8 allows remote attackers to have an unspecified impact via a negative Content-Length header, which triggers a buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade pidgin | Sep 20, 2017 | Feb 6, 2014 |
| Centos_linux | — | Upgrade pidgin-develUpgrade pidgin-docsUpgrade pidgin-perlUpgrade finch-develUpgrade libpurple-tclUpgrade libpurple-perlUpgrade libpurpleUpgrade libpurple-develUpgrade pidginUpgrade finch | Dec 1, 2016 | Feb 6, 2014 |
| Debian | — | Upgrade pidgin | Jul 30, 2024 | Feb 6, 2014 |
| Gentoo Linux | — | Upgrade net-im/pidgin. | Oct 30, 2017 | Feb 6, 2014 |
| Oracle Solaris | — | Upgrade entire to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2 | May 29, 2017 | Feb 6, 2014 |
| Oracle_linux | — | Upgrade libpurple-perlUpgrade finch-develUpgrade libpurple-tclUpgrade libpurpleUpgrade pidgin-perlUpgrade finchUpgrade pidginUpgrade pidgin-docsUpgrade pidgin-develUpgrade libpurple-devel | Oct 16, 2024 | Feb 6, 2014 |
| Suse | — | Upgrade libpurpleUpgrade sle-sdk-releaseUpgrade pidginUpgrade libpurple-develUpgrade libpurple-langUpgrade libpurple-tclUpgrade pidgin-develUpgrade libpurple-meanwhileUpgrade finchUpgrade finch-devel | May 29, 2014 | Feb 6, 2014 |
| Ubuntu | — | Upgrade libpurple0Upgrade pidgin | Nov 8, 2024 | Feb 6, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub