libpurple/protocols/irc/msgs.c in the IRC protocol plugin in libpurple in Pidgin before 2.6.2 allows remote IRC servers to cause a denial of service (NULL pointer dereference and application crash) via a TOPIC message that lacks a topic string.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade pidginUpgrade finchUpgrade libpurple-develUpgrade libpurple-perlUpgrade libpurple-tclUpgrade pidgin-develUpgrade finch-develUpgrade libpurpleUpgrade pidgin-perl | Dec 1, 2016 | Sep 8, 2009 |
| Debian | — | Upgrade pidgin | Jul 30, 2024 | Sep 8, 2009 |
| Suse | — | Upgrade finchUpgrade pidgin-develUpgrade libpurple-langUpgrade libpurple-branding-upstreamUpgrade libpurple-meanwhileUpgrade finch-develUpgrade libpurple-tclUpgrade libpurple-plugin-sametimeUpgrade pidginUpgrade libpurpleUpgrade libpurple-devel | Aug 9, 2024 | Jul 9, 2013 |
| Ubuntu | — | Upgrade pidgin | Nov 8, 2024 | Sep 8, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub