The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The clientautoresp function in family_icbm.c in the oscar protocol plugin in libpurple in Pidgin before 2.7.2 allows remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via an X-Status message that lacks the expected end tag for a (1) desc or (2) title element.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade pidgin | Jul 30, 2024 | Jul 30, 2010 |
| Suse | — | Upgrade libpurple-tclUpgrade libpurple-develUpgrade pidginUpgrade libpurple-langUpgrade libpurple-meanwhileUpgrade libpurple-branding-upstreamUpgrade libpurple-plugin-sametimeUpgrade pidgin-develUpgrade finch-develUpgrade finchUpgrade libpurple | Aug 9, 2024 | Jul 9, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub