nmevent.c in the Novell GroupWise protocol plugin in libpurple in Pidgin before 2.10.10 allows remote servers to cause a denial of service (application crash) via a crafted server message that triggers a large memory allocation.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade pidgin-debuginfoUpgrade libpurpleUpgrade libpurple-develUpgrade libpurple-tclUpgrade finchUpgrade pidginUpgrade finch-develUpgrade pidgin-develUpgrade pidgin-perlUpgrade libpurple-perl | Aug 28, 2019 | Oct 29, 2014 |
| Debian | — | Upgrade pidgin | Jul 30, 2024 | Oct 29, 2014 |
| Freebsd | — | Upgrade libpurpleUpgrade pidgin | Dec 10, 2025 | Oct 24, 2014 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libpurple | Nov 30, 2017 | Oct 29, 2014 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libpurple | Nov 30, 2017 | Oct 29, 2014 |
| Oracle Solaris | — | Upgrade communication/im/pidgin to version 2.10.11-0.175.2.11.0.3.0 on Solaris 11.2Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.3.0.0.28.0 on Solaris 11.3 | May 29, 2017 | Oct 29, 2014 |
| Oracle_linux | — | Upgrade finchUpgrade libpurple-tclUpgrade pidgin-perlUpgrade finch-develUpgrade pidgin-develUpgrade libpurpleUpgrade libpurple-perlUpgrade pidginUpgrade libpurple-devel | Aug 8, 2017 | Oct 22, 2014 |
| Redhat_linux | — | Upgrade pidgin-perlUpgrade libpurple-develUpgrade finch-develNo solution existsUpgrade pidgin-debuginfoUpgrade libpurpleUpgrade libpurple-tclUpgrade finchUpgrade pidgin-develUpgrade pidginUpgrade libpurple-perl | Aug 3, 2017 | Oct 29, 2014 |
| Suse | — | Upgrade libpurple-plugin-sametimeUpgrade libpurpleUpgrade pidgin-develUpgrade finchUpgrade libpurple-meanwhileUpgrade libpurple-tclUpgrade finch-develUpgrade libpurple-langUpgrade libpurple-branding-upstreamUpgrade libpurple-develUpgrade pidgin | Dec 18, 2015 | Oct 29, 2014 |
| Ubuntu | — | Upgrade libpurple0Upgrade pidgin | Nov 8, 2024 | Oct 29, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub