The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The XMPP protocol plugin in libpurple in Pidgin before 2.10.1 does not properly handle missing fields in (1) voice-chat and (2) video-chat stanzas, which allows remote attackers to cause a denial of service (application crash) via a crafted message.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade finchUpgrade pidgin-perlUpgrade finch-develUpgrade pidgin-develUpgrade libpurple-perlUpgrade libpurpleUpgrade pidginUpgrade pidgin-docsUpgrade libpurple-develUpgrade libpurple-tcl | Dec 1, 2016 | Dec 16, 2011 |
| Debian | — | Upgrade pidgin | Jul 30, 2024 | Dec 17, 2011 |
| Oracle_linux | — | Upgrade libpurple-tclUpgrade libpurple-develUpgrade libpurpleUpgrade pidginUpgrade finch-develUpgrade libpurple-perlUpgrade pidgin-docsUpgrade finchUpgrade pidgin-develUpgrade pidgin-perl | Oct 16, 2024 | Dec 17, 2011 |
| Suse | — | Upgrade finchUpgrade pidgin-develUpgrade pidginUpgrade libpurple-develUpgrade libpurple-langUpgrade finch-develUpgrade libpurple | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libpurple0Upgrade finchUpgrade pidgin | Nov 8, 2024 | Dec 17, 2011 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub