util.c in libpurple in Pidgin before 2.10.8 does not properly allocate memory for HTTP responses that are inconsistent with the Content-Length header, which allows remote HTTP servers to cause a denial of service (application crash) via a crafted response.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade pidgin | Sep 20, 2017 | Feb 6, 2014 |
| Centos_linux | — | Upgrade libpurple-develUpgrade pidgin-docsUpgrade libpurpleUpgrade pidginUpgrade finchUpgrade pidgin-develUpgrade libpurple-tclUpgrade finch-develUpgrade libpurple-perlUpgrade pidgin-perl | Dec 1, 2016 | Feb 6, 2014 |
| Debian | — | Upgrade pidgin | Jul 30, 2024 | Feb 6, 2014 |
| Gentoo Linux | — | Upgrade net-im/pidgin. | Oct 30, 2017 | Feb 6, 2014 |
| Oracle Solaris | — | Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2Upgrade entire to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2 | May 29, 2017 | Feb 6, 2014 |
| Oracle_linux | — | Upgrade pidgin-docsUpgrade libpurple-tclUpgrade libpurple-develUpgrade pidgin-develUpgrade pidgin-perlUpgrade libpurpleUpgrade libpurple-perlUpgrade pidginUpgrade finchUpgrade finch-devel | Oct 16, 2024 | Feb 6, 2014 |
| Suse | — | Upgrade ksplash-qml-branding-basedonopensuseUpgrade libpurple-plugin-openfetion-langUpgrade lightdm-gtk-greeter-branding-basedonopensuseUpgrade bot-sentryUpgrade leechcraft-dbusmanagerUpgrade leechcraft-azoth-adiumstylesUpgrade leechcraft-azoth-docUpgrade e17-branding-basedonopensuseUpgrade leechcraft-secman-simplestorageUpgrade leechcraft-otlozhuUpgrade leechcraft-poshuku-fileschemeUpgrade leechcraft-shellopenUpgrade compiz-branding-basedonopensuseUpgrade telepathy-hazeUpgrade libpurple-plugin-facebookchatUpgrade libpurple-develUpgrade leechcraft-kbswitchUpgrade pidginUpgrade leechcraft-azoth-standardstylesUpgrade pidgin-advanced-sound-notificationUpgrade pidgin-facebookchatUpgrade leechcraft-azoth-shxUpgrade leechcraft-launchyUpgrade leechcraft-sb2Upgrade leechcraft-anheroUpgrade susegreeter-branding-basedonopensuseUpgrade pidgin-plugin-pack-extrasUpgrade libpurple-plugin-skypeUpgrade leechcraft-blogique-hestiaUpgrade pidgin-otrUpgrade libpurple-plugin-bot-sentry-langUpgrade epiphany-branding-basedonopensuseUpgrade pidgin-develUpgrade wallpaper-branding-basedonopensuseUpgrade leechcraft-azoth-velvetbirdUpgrade leechcraft-azoth-modnokUpgrade leechcraft-azoth-vaderUpgrade leechcraft-lmp-graffitiUpgrade pidgin-plugin-packUpgrade leechcraft-cstpUpgrade finchUpgrade xfwm4-branding-basedonopensuseUpgrade plymouth-branding-basedonopensuseUpgrade leechcraft-knowhowUpgrade leechcraft-azoth-juickUpgrade libgarcon-branding-basedonopensuseUpgrade sle-sdk-releaseUpgrade libpurple-plugin-mrim-langUpgrade leechcraft-secmanUpgrade libpurple-branding-basedonopensuseUpgrade leechcraft-deadlyricsUpgrade pidgin-sipeUpgrade xfce4-notifyd-branding-basedonopensuseUpgrade libsocialweb-branding-basedonopensuseUpgrade leechcraft-poshukuUpgrade pidgin-birthday-reminderUpgrade leechcraft-azothUpgrade purple-plugin-packUpgrade leechcraft-tpiUpgrade libpurple-plugin-sipeUpgrade leechcraft-poshuku-cleanwebUpgrade splashy-branding-basedonopensuseUpgrade leechcraft-azoth-isteriqueUpgrade leechcraft-azoth-embedmediaUpgrade libpurple-langUpgrade leechcraft-dumbeepUpgrade leechcraft-azoth-acetamideUpgrade pidgin-guifications-langUpgrade leechcraft-pogooglueUpgrade leechcraft-netstoremanager-googledriveUpgrade libpurple-plugin-pack-extrasUpgrade pidgin-plugin-birthday-reminderUpgrade leechcraft-poshuku-onlinebookmarks-readitlaterUpgrade gdm-branding-basedonopensuseUpgrade leechcraft-azoth-p100qUpgrade leechcraft-poshuku-autosearchUpgrade kdebase4-runtime-branding-basedonopensuseUpgrade leechcraft-poshuku-keywordsUpgrade libpurpleUpgrade leechcraft-lmp-mp3tunesUpgrade leechcraft-azoth-otroidUpgrade PackageKit-branding-basedonopensuseUpgrade skype4pidginUpgrade leechcraft-azoth-zheetUpgrade leechcraft-monocle-seenUpgrade branding-basedonopensuseUpgrade libxfce4ui-branding-basedonopensuseUpgrade leechcraft-auscrieUpgrade leechcraft-monocleUpgrade kdebase4-workspace-branding-basedonopensuseUpgrade MozillaFirefox-branding-basedonopensuseUpgrade leechcraft-advancednotificationsUpgrade leechcraft-azoth-keesoUpgrade libpurple-branding-upstreamUpgrade pidgin-birthday-reminder-langUpgrade leechcraft-hotstreamsUpgrade leechcraft-summaryUpgrade libpurple-plugin-openfetionUpgrade leechcraft-lmp-dumbsyncUpgrade leechcraft-gmailnotifierUpgrade install-initrd-branding-basedonopensuseUpgrade leechcraft-liznooUpgrade leechcraft-syncerUpgrade pidgin-plugin-embeddedvideoUpgrade leechcraft-monocle-fxbUpgrade libpurple-plugin-mrimUpgrade libpurple-plugin-skype-langUpgrade ksplashx-branding-basedonopensuseUpgrade kdm-branding-basedonopensuseUpgrade leechcraft-seekthruUpgrade fcitx-branding-basedonopensuseUpgrade leechcraft-lmpUpgrade leechcraft-aggregator-bodyfetchUpgrade leechcraft-develUpgrade systemd-presets-branding-basedonopensuseUpgrade leechcraft-vgrabberUpgrade leechcraft-gactsUpgrade leechcraft-azoth-rosenthalUpgrade xfce4-settings-branding-basedonopensuseUpgrade leechcraft-choroidUpgrade leechcraft-kinotifyUpgrade leechcraft-shaitanUpgrade leechcraft-azoth-xooxUpgrade leechcraft-xproxyUpgrade leechcraft-monocle-pdfUpgrade libpurple-branding-openSUSEUpgrade kdelibs4-branding-basedonopensuseUpgrade leechcraft-azoth-nativeemoticonsUpgrade libreoffice-branding-basedonopensuseUpgrade purple-plugin-pack-langUpgrade leechcraft-pintabUpgrade leechcraft-netstoremanagerUpgrade leechcraft-tabslistUpgrade leechcraft-aggregatorUpgrade yast2-qt-branding-basedonopensuseUpgrade pidgin-advanced-sound-notification-langUpgrade leechcraft-docUpgrade leechcraft-dolozheeUpgrade leechcraft-hotsensorsUpgrade pidgin-guificationsUpgrade yast2-branding-basedonopensuseUpgrade xfdesktop-branding-basedonopensuseUpgrade leechcraft-lackmanUpgrade pidgin-mrimUpgrade libpurple-plugin-bot-sentryUpgrade pidgin-plugin-guificationsUpgrade gcin-branding-basedonopensuseUpgrade leechcraft-azoth-lastseenUpgrade pidgin-embeddedvideoUpgrade leechcraft-poshuku-onlinebookmarks-deliciousUpgrade lxde-common-branding-basedonopensuseUpgrade leechcraft-lastfmscrobbleUpgrade leechcraft-lemonUpgrade gnome-menus-branding-basedonopensuseUpgrade pidgin-branding-openSUSEUpgrade pidgin-plugin-skypeUpgrade leechcraft-azoth-metacontactsUpgrade finch-develUpgrade leechcraft-lhtrUpgrade leechcraft-blogiqueUpgrade leechcraftUpgrade leechcraft-vroobyUpgrade xfce4-splash-branding-basedonopensuseUpgrade gtk2-branding-basedonopensuseUpgrade xfce4-panel-branding-basedonopensuseUpgrade gtk3-branding-basedonopensuseUpgrade telepathy-plugin-sipeUpgrade leechcraft-azoth-herbicideUpgrade dynamic-wallpaper-branding-basedonopensuseUpgrade gconf2-branding-basedonopensuseUpgrade leechcraft-touchstreamsUpgrade leechcraft-azoth-depesterUpgrade leechcraft-bittorrentUpgrade gio-branding-basedonopensuseUpgrade leechcraft-azoth-autopasteUpgrade leechcraft-monocle-docUpgrade leechcraft-historyholderUpgrade leechcraft-azoth-birthdaynotifierUpgrade leechcraft-blogique-metidaUpgrade hicolor-icon-theme-branding-basedonopensuseUpgrade kdebase3-SuSE-branding-basedonopensuseUpgrade leechcraft-azoth-autoidlerUpgrade pidgin-openfetionUpgrade xfce4-session-branding-basedonopensuseUpgrade leechcraft-azoth-hili | Mar 3, 2014 | Feb 6, 2014 |
| Ubuntu | — | Upgrade pidginUpgrade libpurple0 | Nov 8, 2024 | Feb 6, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub