libgadu before 1.8.2 allows remote servers to cause a denial of service (crash) via a contact description with a large length, which triggers a buffer over-read.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libgadu | Jul 30, 2024 | Oct 28, 2008 |
| Gentoo Linux | — | Upgrade dev-php/suhosin.Upgrade x11-misc/slock.Upgrade x11-libs/vte.Upgrade net-analyzer/lft.Upgrade net-im/gg-transport.Upgrade www-apps/egroupware.Upgrade sys-cluster/ganglia. | Oct 30, 2017 | Oct 28, 2008 |
| Suse | — | Upgrade kdenetwork4-filesharingUpgrade kde4-kopeteUpgrade libgaduUpgrade kde4-krdcUpgrade kde4-knewstickerUpgrade kde4-kgetUpgrade kde4-krfbUpgrade libgadu-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libgadu3 | Nov 8, 2024 | Oct 28, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub