An out-of-bounds write flaw was found in the way Pidgin before 2.12.0 processed XML content. A malicious remote server could potentially use this flaw to crash Pidgin or execute arbitrary code in the context of the pidgin process.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade pidgin | Jul 27, 2018 | Jul 27, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 27, 2018 |
| Centos_linux | — | Upgrade finch-develUpgrade libpurple-develUpgrade finchUpgrade libpurpleUpgrade libpurple-tclUpgrade pidgin-perlUpgrade pidginUpgrade pidgin-develUpgrade pidgin-debuginfoUpgrade libpurple-perl | Aug 28, 2019 | Jul 27, 2018 |
| Debian | — | Upgrade pidgin | Mar 11, 2017 | Mar 10, 2017 |
| Gentoo Linux | — | Upgrade net-im/pidgin. | Oct 30, 2017 | Jun 6, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libpurple | Jan 18, 2018 | Mar 10, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libpurple | Jan 18, 2018 | Mar 10, 2017 |
| Oracle_linux | — | Upgrade pidgin-perlUpgrade finch-develUpgrade pidginUpgrade libpurple-develUpgrade libpurpleUpgrade libpurple-tclUpgrade finchUpgrade pidgin-develUpgrade libpurple-perl | Aug 8, 2017 | Mar 10, 2017 |
| Redhat_linux | — | Upgrade pidginUpgrade pidgin-debuginfoUpgrade libpurple-develUpgrade libpurple-perlUpgrade pidgin-develUpgrade libpurpleNo solution existsUpgrade finch-develUpgrade pidgin-perlUpgrade finchUpgrade libpurple-tcl | Aug 3, 2017 | Mar 10, 2017 |
| Suse | — | Upgrade libpurple-plugin-sametimeUpgrade libpurple-develUpgrade libpurple-branding-upstreamUpgrade pidginUpgrade libpurpleUpgrade pidgin-develUpgrade finch-develUpgrade finchUpgrade libpurple-langUpgrade libpurple-tcl | Apr 5, 2017 | Mar 10, 2017 |
| Ubuntu | — | Upgrade libpurple0 | Mar 15, 2017 | Mar 10, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub