util.c in libpurple in Pidgin before 2.10.8 does not properly allocate memory for HTTP responses that are inconsistent with the Content-Length header, which allows remote HTTP servers to cause a denial of service (application crash) via a crafted response.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade pidgin | Sep 20, 2017 | Feb 6, 2014 |
| Centos_linux | — | Upgrade pidginUpgrade finchUpgrade libpurple-develUpgrade libpurpleUpgrade pidgin-docsUpgrade finch-develUpgrade pidgin-perlUpgrade libpurple-tclUpgrade libpurple-perlUpgrade pidgin-devel | Dec 1, 2016 | Feb 6, 2014 |
| Debian | — | Upgrade pidgin | Jul 30, 2024 | Feb 6, 2014 |
| Gentoo Linux | — | Upgrade net-im/pidgin. | Oct 30, 2017 | Feb 6, 2014 |
| Oracle Solaris | — | Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2Upgrade entire to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2 | May 29, 2017 | Feb 6, 2014 |
| Oracle_linux | — | Upgrade pidgin-docsUpgrade libpurple-tclUpgrade libpurple-develUpgrade pidgin-perlUpgrade libpurpleUpgrade pidgin-develUpgrade finch-develUpgrade finchUpgrade libpurple-perlUpgrade pidgin | Oct 16, 2024 | Feb 6, 2014 |
| Suse | — | Upgrade leechcraft-aggregator-bodyfetchUpgrade leechcraft-touchstreamsUpgrade leechcraft-advancednotificationsUpgrade install-initrd-branding-basedonopensuseUpgrade leechcraft-monocle-pdfUpgrade gtk3-branding-basedonopensuseUpgrade leechcraft-azoth-keesoUpgrade gio-branding-basedonopensuseUpgrade gcin-branding-basedonopensuseUpgrade leechcraft-seekthruUpgrade leechcraft-vroobyUpgrade leechcraft-xproxyUpgrade leechcraft-lackmanUpgrade leechcraft-azoth-rosenthalUpgrade leechcraft-azoth-lastseenUpgrade leechcraft-gmailnotifierUpgrade leechcraft-dolozheeUpgrade leechcraft-tabslistUpgrade fcitx-branding-basedonopensuseUpgrade xfce4-splash-branding-basedonopensuseUpgrade kdm-branding-basedonopensuseUpgrade finch-develUpgrade leechcraft-docUpgrade libpurple-plugin-skype-langUpgrade libreoffice-branding-basedonopensuseUpgrade xfce4-panel-branding-basedonopensuseUpgrade xfce4-session-branding-basedonopensuseUpgrade leechcraft-azoth-autoidlerUpgrade libpurple-branding-upstreamUpgrade leechcraft-lmp-dumbsyncUpgrade hicolor-icon-theme-branding-basedonopensuseUpgrade leechcraft-historyholderUpgrade pidgin-birthday-reminder-langUpgrade ksplashx-branding-basedonopensuseUpgrade leechcraftUpgrade leechcraft-syncerUpgrade pidgin-embeddedvideoUpgrade leechcraft-netstoremanagerUpgrade leechcraft-blogique-metidaUpgrade leechcraft-azoth-birthdaynotifierUpgrade leechcraft-azoth-hiliUpgrade leechcraft-monocle-docUpgrade telepathy-plugin-sipeUpgrade kdelibs4-branding-basedonopensuseUpgrade pidgin-plugin-embeddedvideoUpgrade leechcraft-aggregatorUpgrade libpurple-plugin-openfetionUpgrade leechcraft-azoth-xooxUpgrade leechcraft-liznooUpgrade leechcraft-hotsensorsUpgrade leechcraft-blogiqueUpgrade leechcraft-vgrabberUpgrade yast2-qt-branding-basedonopensuseUpgrade yast2-branding-basedonopensuseUpgrade pidgin-branding-openSUSEUpgrade pidgin-advanced-sound-notification-langUpgrade leechcraft-lastfmscrobbleUpgrade lxde-common-branding-basedonopensuseUpgrade libpurple-plugin-mrimUpgrade leechcraft-azoth-autopasteUpgrade leechcraft-lemonUpgrade gconf2-branding-basedonopensuseUpgrade leechcraft-choroidUpgrade leechcraft-kinotifyUpgrade pidgin-plugin-skypeUpgrade leechcraft-gactsUpgrade xfdesktop-branding-basedonopensuseUpgrade leechcraft-lmpUpgrade dynamic-wallpaper-branding-basedonopensuseUpgrade systemd-presets-branding-basedonopensuseUpgrade leechcraft-shaitanUpgrade kdebase4-workspace-branding-basedonopensuseUpgrade leechcraft-pintabUpgrade gnome-menus-branding-basedonopensuseUpgrade libpurple-plugin-bot-sentryUpgrade leechcraft-poshuku-onlinebookmarks-deliciousUpgrade gtk2-branding-basedonopensuseUpgrade leechcraft-azoth-metacontactsUpgrade leechcraft-lhtrUpgrade leechcraft-summaryUpgrade leechcraft-monocle-fxbUpgrade purple-plugin-pack-langUpgrade leechcraft-azoth-nativeemoticonsUpgrade leechcraft-hotstreamsUpgrade leechcraft-azoth-herbicideUpgrade MozillaFirefox-branding-basedonopensuseUpgrade libpurple-branding-openSUSEUpgrade pidgin-guificationsUpgrade xfce4-settings-branding-basedonopensuseUpgrade leechcraft-bittorrentUpgrade leechcraft-develUpgrade pidgin-openfetionUpgrade leechcraft-azoth-depesterUpgrade kdebase3-SuSE-branding-basedonopensuseUpgrade pidgin-plugin-guificationsUpgrade pidgin-mrimUpgrade pidgin-sipeUpgrade leechcraft-azoth-vaderUpgrade pidgin-otrUpgrade pidgin-facebookchatUpgrade libpurple-plugin-packUpgrade pidgin-advanced-sound-notificationUpgrade leechcraft-sb2Upgrade pidgin-birthday-reminderUpgrade leechcraft-newlifeUpgrade skype4pidginUpgrade kdebase4-runtime-branding-basedonopensuseUpgrade leechcraft-poshuku-fuaUpgrade libpurple-tclUpgrade leechcraft-networkmonitorUpgrade leechcraft-azoth-chathistoryUpgrade leechcraft-azoth-otroidUpgrade leechcraft-poshukuUpgrade leechcraft-tpiUpgrade leechcraft-poshuku-fatapeUpgrade leechcraft-auscrieUpgrade leechcraft-secman-simplestorageUpgrade wallpaper-branding-basedonopensuseUpgrade midori-branding-basedonopensuseUpgrade ksplash-qml-branding-basedonopensuseUpgrade branding-basedonopensuseUpgrade pidgin-guifications-langUpgrade pidgin-develUpgrade leechcraft-cstpUpgrade leechcraft-azoth-juickUpgrade xfwm4-branding-basedonopensuseUpgrade libpurple-plugin-bot-sentry-langUpgrade leechcraft-kbswitchUpgrade pidginUpgrade leechcraft-dbusmanagerUpgrade leechcraft-azoth-modnokUpgrade compiz-branding-basedonopensuseUpgrade leechcraft-azoth-adiumstylesUpgrade leechcraft-azoth-isteriqueUpgrade libpurple-plugin-sipeUpgrade gfxboot-branding-basedonopensuseUpgrade leechcraft-azoth-embedmediaUpgrade leechcraft-poshuku-cleanwebUpgrade leechcraft-azoth-p100qUpgrade leechcraft-knowhowUpgrade leechcraft-monocle-postrusUpgrade leechcraft-dumbeepUpgrade libpurple-branding-basedonopensuseUpgrade leechcraft-poshuku-onlinebookmarks-readitlaterUpgrade finchUpgrade pidgin-plugin-packUpgrade leechcraft-azoth-velvetbirdUpgrade leechcraft-poshuku-fileschemeUpgrade susegreeter-branding-basedonopensuseUpgrade libpurple-develUpgrade libpurple-langUpgrade epiphany-branding-basedonopensuseUpgrade leechcraft-azoth-zheetUpgrade leechcraft-deadlyricsUpgrade libpurple-plugin-facebookchatUpgrade pidgin-plugin-birthday-reminderUpgrade leechcraft-glanceUpgrade leechcraft-azoth-acetamideUpgrade xfce4-notifyd-branding-basedonopensuseUpgrade pidgin-plugin-pack-extrasUpgrade leechcraft-otlozhuUpgrade libpurple-plugin-skypeUpgrade pidgin-plugin-advanced-sound-notificationUpgrade lightdm-gtk-greeter-branding-basedonopensuseUpgrade leechcraft-lmp-graffitiUpgrade leechcraft-shellopenUpgrade purple-plugin-packUpgrade awesome-branding-basedonopensuseUpgrade leechcraft-launchyUpgrade sle-sdk-releaseUpgrade leechcraft-azoth-xtazyUpgrade leechcraft-monocle-muUpgrade libpurple-plugin-openfetion-langUpgrade telepathy-hazeUpgrade e17-branding-basedonopensuseUpgrade libsocialweb-branding-basedonopensuseUpgrade leechcraft-azoth-standardstylesUpgrade leechcraft-poshuku-keywordsUpgrade grub2-branding-basedonopensuseUpgrade leechcraft-anheroUpgrade leechcraft-popishuUpgrade thunar-volman-branding-basedonopensuseUpgrade leechcraft-monocleUpgrade leechcraft-secmanUpgrade splashy-branding-basedonopensuseUpgrade plymouth-branding-basedonopensuseUpgrade leechcraft-netstoremanager-googledriveUpgrade libexo-1-0-branding-basedonopensuseUpgrade leechcraft-azoth-docUpgrade libgarcon-branding-basedonopensuseUpgrade libpurple-plugin-mrim-langUpgrade leechcraft-pogooglueUpgrade leechcraft-poshuku-onlinebookmarksUpgrade PackageKit-branding-basedonopensuseUpgrade leechcraft-azoth-shxUpgrade leechcraft-blogique-hestiaUpgrade leechcraft-poshuku-autosearchUpgrade leechcraft-monocle-seenUpgrade leechcraft-tabsessionmanagerUpgrade leechcraft-azothUpgrade leechcraft-lmp-mp3tunesUpgrade libpurple-meanwhileUpgrade libpurple-plugin-pack-extrasUpgrade libpurpleUpgrade bot-sentryUpgrade gdm-branding-basedonopensuseUpgrade leechcraft-musiczombieUpgrade libxfce4ui-branding-basedonopensuse | Mar 3, 2014 | Feb 6, 2014 |
| Ubuntu | — | Upgrade libpurple0Upgrade pidgin | Nov 8, 2024 | Feb 6, 2014 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub