Multiple integer signedness errors in libpurple in Pidgin before 2.10.8 allow remote attackers to cause a denial of service (application crash) via a crafted timestamp value in an XMPP message.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade pidgin | Sep 20, 2017 | Feb 6, 2014 |
| Centos_linux | — | Upgrade finch-develUpgrade finchUpgrade pidgin-develUpgrade libpurpleUpgrade pidgin-perlUpgrade libpurple-tclUpgrade libpurple-perlUpgrade libpurple-develUpgrade pidginUpgrade pidgin-docs | Dec 1, 2016 | Feb 6, 2014 |
| Debian | — | Upgrade pidgin | Jul 30, 2024 | Feb 6, 2014 |
| Gentoo Linux | — | Upgrade net-im/pidgin. | Oct 30, 2017 | Feb 6, 2014 |
| Oracle Solaris | — | Upgrade entire to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2 | May 29, 2017 | Feb 6, 2014 |
| Oracle_linux | — | Upgrade libpurple-perlUpgrade pidgin-develUpgrade pidgin-perlUpgrade finch-develUpgrade finchUpgrade pidginUpgrade libpurple-develUpgrade libpurpleUpgrade pidgin-docsUpgrade libpurple-tcl | Oct 16, 2024 | Feb 6, 2014 |
| Suse | — | Upgrade leechcraft-lackmanUpgrade leechcraft-syncerUpgrade wallpaper-branding-basedonopensuseUpgrade gdm-branding-basedonopensuseUpgrade kdebase3-SuSE-branding-basedonopensuseUpgrade leechcraft-aggregatorUpgrade xfce4-session-branding-basedonopensuseUpgrade pidgin-plugin-skypeUpgrade leechcraft-netstoremanagerUpgrade leechcraft-azothUpgrade leechcraft-vgrabberUpgrade libpurple-tclUpgrade libpurple-plugin-bot-sentry-langUpgrade systemd-presets-branding-basedonopensuseUpgrade libpurple-branding-basedonopensuseUpgrade leechcraft-bittorrentUpgrade leechcraft-gmailnotifierUpgrade leechcraft-azoth-xooxUpgrade libpurple-plugin-mrim-langUpgrade gfxboot-branding-basedonopensuseUpgrade leechcraft-azoth-shxUpgrade libpurple-plugin-sipeUpgrade leechcraft-musiczombieUpgrade leechcraft-azoth-modnokUpgrade skype4pidginUpgrade leechcraft-kbswitchUpgrade leechcraft-monocle-docUpgrade leechcraft-azoth-standardstylesUpgrade grub2-branding-basedonopensuseUpgrade leechcraft-xproxyUpgrade yast2-qt-branding-basedonopensuseUpgrade libpurple-plugin-bot-sentryUpgrade pidgin-plugin-pack-extrasUpgrade leechcraft-azoth-metacontactsUpgrade leechcraft-poshuku-fileschemeUpgrade gtk2-branding-basedonopensuseUpgrade leechcraft-azoth-isteriqueUpgrade leechcraft-dbusmanagerUpgrade leechcraft-lmpUpgrade epiphany-branding-basedonopensuseUpgrade leechcraft-azoth-docUpgrade leechcraft-develUpgrade leechcraft-knowhowUpgrade leechcraft-azoth-juickUpgrade leechcraft-shellopenUpgrade leechcraft-azoth-zheetUpgrade leechcraft-azoth-herbicideUpgrade leechcraft-auscrieUpgrade kdebase4-runtime-branding-basedonopensuseUpgrade libpurple-develUpgrade leechcraft-cstpUpgrade libpurple-langUpgrade libxfce4ui-branding-basedonopensuseUpgrade midori-branding-basedonopensuseUpgrade leechcraft-azoth-lastseenUpgrade leechcraft-azoth-embedmediaUpgrade leechcraft-deadlyricsUpgrade splashy-branding-basedonopensuseUpgrade leechcraft-blogique-metidaUpgrade leechcraft-docUpgrade leechcraft-azoth-p100qUpgrade leechcraft-azoth-chathistoryUpgrade pidgin-advanced-sound-notification-langUpgrade leechcraft-tpiUpgrade leechcraft-networkmonitorUpgrade leechcraft-lmp-graffitiUpgrade pidgin-sipeUpgrade leechcraft-monocleUpgrade gio-branding-basedonopensuseUpgrade susegreeter-branding-basedonopensuseUpgrade leechcraft-aggregator-bodyfetchUpgrade leechcraft-monocle-muUpgrade branding-basedonopensuseUpgrade bot-sentryUpgrade leechcraft-pogooglueUpgrade leechcraft-azoth-nativeemoticonsUpgrade pidgin-plugin-guificationsUpgrade kdm-branding-basedonopensuseUpgrade libreoffice-branding-basedonopensuseUpgrade leechcraft-monocle-postrusUpgrade gcin-branding-basedonopensuseUpgrade leechcraft-liznooUpgrade leechcraft-newlifeUpgrade leechcraft-pintabUpgrade xfwm4-branding-basedonopensuseUpgrade PackageKit-branding-basedonopensuseUpgrade libpurple-plugin-skypeUpgrade leechcraft-azoth-adiumstylesUpgrade leechcraftUpgrade pidgin-guificationsUpgrade leechcraft-hotstreamsUpgrade leechcraft-dolozheeUpgrade leechcraft-azoth-hiliUpgrade leechcraft-poshuku-fuaUpgrade leechcraft-hotsensorsUpgrade pidgin-plugin-advanced-sound-notificationUpgrade leechcraft-lhtrUpgrade ksplash-qml-branding-basedonopensuseUpgrade yast2-branding-basedonopensuseUpgrade leechcraft-poshuku-keywordsUpgrade purple-plugin-packUpgrade pidgin-advanced-sound-notificationUpgrade lightdm-gtk-greeter-branding-basedonopensuseUpgrade leechcraft-kinotifyUpgrade leechcraft-otlozhuUpgrade xfdesktop-branding-basedonopensuseUpgrade lxde-common-branding-basedonopensuseUpgrade hicolor-icon-theme-branding-basedonopensuseUpgrade kdebase4-workspace-branding-basedonopensuseUpgrade pidgin-guifications-langUpgrade leechcraft-monocle-seenUpgrade leechcraft-secmanUpgrade leechcraft-azoth-xtazyUpgrade pidgin-branding-openSUSEUpgrade leechcraft-historyholderUpgrade xfce4-panel-branding-basedonopensuseUpgrade leechcraft-lmp-dumbsyncUpgrade leechcraft-monocle-pdfUpgrade e17-branding-basedonopensuseUpgrade libpurple-plugin-facebookchatUpgrade leechcraft-tabslistUpgrade libpurple-plugin-openfetion-langUpgrade gnome-menus-branding-basedonopensuseUpgrade finch-develUpgrade libexo-1-0-branding-basedonopensuseUpgrade leechcraft-sb2Upgrade pidgin-plugin-embeddedvideoUpgrade sle-sdk-releaseUpgrade plymouth-branding-basedonopensuseUpgrade libpurple-plugin-packUpgrade leechcraft-azoth-autoidlerUpgrade leechcraft-choroidUpgrade pidgin-birthday-reminder-langUpgrade leechcraft-lmp-mp3tunesUpgrade pidgin-plugin-birthday-reminderUpgrade purple-plugin-pack-langUpgrade compiz-branding-basedonopensuseUpgrade leechcraft-poshuku-cleanwebUpgrade dynamic-wallpaper-branding-basedonopensuseUpgrade leechcraft-azoth-velvetbirdUpgrade leechcraft-monocle-fxbUpgrade libpurple-plugin-pack-extrasUpgrade pidgin-plugin-packUpgrade leechcraft-secman-simplestorageUpgrade awesome-branding-basedonopensuseUpgrade leechcraft-glanceUpgrade leechcraft-seekthruUpgrade leechcraft-azoth-autopasteUpgrade leechcraft-touchstreamsUpgrade finchUpgrade leechcraft-poshuku-onlinebookmarks-readitlaterUpgrade xfce4-splash-branding-basedonopensuseUpgrade leechcraft-lemonUpgrade leechcraft-poshuku-onlinebookmarks-deliciousUpgrade pidgin-embeddedvideoUpgrade ksplashx-branding-basedonopensuseUpgrade leechcraft-poshukuUpgrade leechcraft-launchyUpgrade leechcraft-azoth-otroidUpgrade leechcraft-dumbeepUpgrade libpurple-branding-upstreamUpgrade fcitx-branding-basedonopensuseUpgrade leechcraft-summaryUpgrade leechcraft-popishuUpgrade leechcraft-lastfmscrobbleUpgrade telepathy-plugin-sipeUpgrade MozillaFirefox-branding-basedonopensuseUpgrade leechcraft-azoth-rosenthalUpgrade gtk3-branding-basedonopensuseUpgrade pidgin-openfetionUpgrade leechcraft-vroobyUpgrade pidgin-facebookchatUpgrade libgarcon-branding-basedonopensuseUpgrade pidgin-develUpgrade leechcraft-azoth-birthdaynotifierUpgrade leechcraft-poshuku-fatapeUpgrade leechcraft-advancednotificationsUpgrade pidgin-mrimUpgrade leechcraft-blogique-hestiaUpgrade telepathy-hazeUpgrade libpurple-meanwhileUpgrade pidginUpgrade leechcraft-azoth-keesoUpgrade xfce4-settings-branding-basedonopensuseUpgrade leechcraft-poshuku-onlinebookmarksUpgrade xfce4-notifyd-branding-basedonopensuseUpgrade libpurple-plugin-openfetionUpgrade leechcraft-anheroUpgrade libpurpleUpgrade libpurple-plugin-skype-langUpgrade libpurple-branding-openSUSEUpgrade thunar-volman-branding-basedonopensuseUpgrade pidgin-otrUpgrade leechcraft-tabsessionmanagerUpgrade leechcraft-netstoremanager-googledriveUpgrade install-initrd-branding-basedonopensuseUpgrade libpurple-plugin-mrimUpgrade leechcraft-azoth-acetamideUpgrade leechcraft-gactsUpgrade leechcraft-shaitanUpgrade kdelibs4-branding-basedonopensuseUpgrade libsocialweb-branding-basedonopensuseUpgrade leechcraft-poshuku-autosearchUpgrade leechcraft-blogiqueUpgrade pidgin-birthday-reminderUpgrade leechcraft-azoth-depesterUpgrade leechcraft-azoth-vaderUpgrade gconf2-branding-basedonopensuse | Mar 3, 2014 | Feb 6, 2014 |
| Ubuntu | — | Upgrade pidginUpgrade libpurple0 | Nov 8, 2024 | Feb 6, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub