Buffer overflow in the decrypt_out function in Pidgin (formerly Gaim) before 2.5.6 allows remote attackers to cause a denial of service (application crash) via a QQ packet.
CVSS Details
- CVSS 3.1 Base Score: 6.2
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libpurple-perlUpgrade pidgin-develUpgrade pidginUpgrade finchUpgrade pidgin-perlUpgrade libpurple-tclUpgrade libpurpleUpgrade libpurple-develUpgrade finch-devel | Dec 1, 2016 | May 26, 2009 |
| Debian | — | Upgrade pidgin | Jul 30, 2024 | May 26, 2009 |
| Freebsd | — | Upgrade pidginUpgrade libpurpleUpgrade finch | Dec 10, 2025 | Jun 16, 2009 |
| Gentoo Linux | — | Upgrade net-im/pidgin. | Oct 30, 2017 | May 26, 2009 |
| Suse | — | Upgrade libpurple-develUpgrade libpurple-langUpgrade pidgin-develUpgrade pidginUpgrade libpurpleUpgrade finch-develUpgrade finch | Aug 9, 2024 | Jun 28, 2013 |
| Ubuntu | — | Upgrade pidgin | Nov 8, 2024 | May 26, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub