vulnerability

Alpine Linux: CVE-2015-8833: pidgin-otr heap use after free vulnerability

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:N/C:C/I:C/A:C)

Published

Apr 11, 2016

Added

Aug 30, 2017

Modified

Oct 30, 2017

Description

Use-after-free vulnerability in the create_smp_dialog function in gtk-dialog.c in the Off-the-Record Messaging (OTR) pidgin-otr plugin before 4.0.2 for Pidgin allows remote attackers to execute arbitrary code via vectors related to the "Authenticate buddy" menu item.

Solution

alpine-linux-upgrade-pidgin-otr

References

ALPINE-5429
ALPINE-5430
ALPINE-5431
ALPINE-5432
BID-84295
CVE-2015-8833
https://attackerkb.com/topics/CVE-2015-8833
DEBIAN-DSA-3528

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report