The Yahoo! protocol plugin in libpurple in Pidgin before 2.10.8 does not properly validate UTF-8 data, which allows remote attackers to cause a denial of service (application crash) via crafted byte sequences.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade pidgin | Sep 20, 2017 | Feb 6, 2014 |
| Centos_linux | — | Upgrade libpurple-develUpgrade libpurple-perlUpgrade libpurple-tclUpgrade pidginUpgrade finch-develUpgrade pidgin-docsUpgrade libpurpleUpgrade pidgin-perlUpgrade pidgin-develUpgrade finch | Dec 1, 2016 | Feb 6, 2014 |
| Debian | — | Upgrade pidgin | Jul 30, 2024 | Feb 6, 2014 |
| Gentoo Linux | — | Upgrade net-im/pidgin. | Oct 30, 2017 | Feb 6, 2014 |
| Oracle Solaris | — | Upgrade entire to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2 | May 29, 2017 | Feb 6, 2014 |
| Oracle_linux | — | Upgrade libpurple-develUpgrade pidgin-docsUpgrade libpurpleUpgrade finchUpgrade pidginUpgrade libpurple-tclUpgrade libpurple-perlUpgrade pidgin-develUpgrade finch-develUpgrade pidgin-perl | Oct 16, 2024 | Feb 6, 2014 |
| Suse | — | Upgrade libpurple-langUpgrade libpurple-tclUpgrade finch-develUpgrade pidgin-develUpgrade libpurple-plugin-sametimeUpgrade libpurple-develUpgrade libpurple-meanwhileUpgrade pidginUpgrade finchUpgrade libpurple-branding-upstreamUpgrade libpurple | Mar 3, 2014 | Jul 9, 2013 |
| Ubuntu | — | Upgrade libpurple0Upgrade pidgin | Nov 8, 2024 | Feb 6, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub