The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The XMPP protocol plugin in libpurple in Pidgin before 2.10.1 does not properly handle missing fields in (1) voice-chat and (2) video-chat stanzas, which allows remote attackers to cause a denial of service (application crash) via a crafted message.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade pidginUpgrade libpurpleUpgrade libpurple-tclUpgrade pidgin-docsUpgrade libpurple-develUpgrade libpurple-perlUpgrade pidgin-develUpgrade pidgin-perlUpgrade finch-develUpgrade finch | Dec 1, 2016 | Dec 16, 2011 |
| Debian | — | Upgrade pidgin | Jul 30, 2024 | Dec 17, 2011 |
| Oracle_linux | — | Upgrade libpurple-develUpgrade libpurple-tclUpgrade pidgin-develUpgrade pidgin-docsUpgrade libpurpleUpgrade pidginUpgrade finchUpgrade pidgin-perlUpgrade finch-develUpgrade libpurple-perl | Oct 16, 2024 | Dec 17, 2011 |
| Suse | — | Upgrade libpurpleUpgrade finch-develUpgrade libpurple-langUpgrade libpurple-develUpgrade finchUpgrade pidgin-develUpgrade pidgin | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libpurple0Upgrade finchUpgrade pidgin | Nov 8, 2024 | Dec 17, 2011 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub