The IRC protocol plugin in libpurple in Pidgin before 2.10.8 does not validate argument counts, which allows remote IRC servers to cause a denial of service (application crash) via a crafted message.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade pidgin | Sep 20, 2017 | Feb 6, 2014 |
| Centos_linux | — | Upgrade libpurpleUpgrade pidgin-docsUpgrade libpurple-tclUpgrade finchUpgrade pidgin-develUpgrade libpurple-perlUpgrade libpurple-develUpgrade finch-develUpgrade pidginUpgrade pidgin-perl | Dec 1, 2016 | Feb 6, 2014 |
| Debian | — | Upgrade pidgin | Jul 30, 2024 | Feb 6, 2014 |
| Gentoo Linux | — | Upgrade net-im/pidgin. | Oct 30, 2017 | Feb 6, 2014 |
| Oracle Solaris | — | Upgrade entire to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2 | May 29, 2017 | Feb 6, 2014 |
| Oracle_linux | — | Upgrade pidginUpgrade pidgin-perlUpgrade finch-develUpgrade libpurple-tclUpgrade finchUpgrade pidgin-develUpgrade libpurple-perlUpgrade libpurpleUpgrade pidgin-docsUpgrade libpurple-devel | Oct 16, 2024 | Feb 6, 2014 |
| Suse | — | Upgrade libpurple-develUpgrade libpurple-tclUpgrade pidginUpgrade libpurple-meanwhileUpgrade libpurple-plugin-sametimeUpgrade libpurple-langUpgrade pidgin-develUpgrade libpurple-branding-upstreamUpgrade finchUpgrade finch-develUpgrade libpurple | Dec 18, 2015 | Feb 6, 2014 |
| Ubuntu | — | Upgrade pidginUpgrade libpurple0 | Nov 8, 2024 | Feb 6, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub