Pidgin before 2.10.8 allows remote MSN servers to cause a denial of service (NULL pointer dereference and crash) via a crafted (1) SOAP response, (2) OIM XML response, or (3) Content-Length header.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade pidgin | Sep 20, 2017 | Feb 6, 2014 |
| Centos_linux | — | Upgrade finch-develUpgrade pidginUpgrade pidgin-docsUpgrade pidgin-develUpgrade pidgin-perlUpgrade libpurple-tclUpgrade libpurple-perlUpgrade finchUpgrade libpurple-develUpgrade libpurple | Dec 1, 2016 | Feb 6, 2014 |
| Debian | — | Upgrade pidgin | Jul 30, 2024 | Feb 6, 2014 |
| Gentoo Linux | — | Upgrade net-im/pidgin. | Oct 30, 2017 | Feb 6, 2014 |
| Oracle Solaris | — | Upgrade entire to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2 | May 29, 2017 | Feb 6, 2014 |
| Oracle_linux | — | Upgrade pidgin-perlUpgrade libpurple-perlUpgrade libpurpleUpgrade libpurple-tclUpgrade libpurple-develUpgrade pidgin-docsUpgrade finch-develUpgrade finchUpgrade pidginUpgrade pidgin-devel | Oct 16, 2024 | Feb 6, 2014 |
| Suse | — | Upgrade gcin-branding-basedonopensuseUpgrade leechcraft-lmp-dumbsyncUpgrade leechcraft-monocleUpgrade leechcraft-knowhowUpgrade leechcraftUpgrade leechcraft-lmpUpgrade libpurple-branding-openSUSEUpgrade leechcraft-blogiqueUpgrade skype4pidginUpgrade leechcraft-musiczombieUpgrade leechcraft-deadlyricsUpgrade yast2-qt-branding-basedonopensuseUpgrade leechcraft-dolozheeUpgrade gtk3-branding-basedonopensuseUpgrade gtk2-branding-basedonopensuseUpgrade leechcraft-monocle-pdfUpgrade leechcraft-aggregatorUpgrade leechcraft-monocle-postrusUpgrade leechcraft-lhtrUpgrade leechcraft-azoth-metacontactsUpgrade leechcraft-azoth-keesoUpgrade lxde-common-branding-basedonopensuseUpgrade leechcraft-lackmanUpgrade leechcraft-shaitanUpgrade leechcraft-hotsensorsUpgrade libreoffice-branding-basedonopensuseUpgrade leechcraft-choroidUpgrade leechcraft-bittorrentUpgrade leechcraft-azoth-standardstylesUpgrade libpurple-langUpgrade libpurple-tclUpgrade pidgin-embeddedvideoUpgrade leechcraft-monocle-docUpgrade pidgin-guifications-langUpgrade leechcraft-blogique-hestiaUpgrade pidgin-advanced-sound-notification-langUpgrade libpurple-plugin-mrimUpgrade pidgin-plugin-embeddedvideoUpgrade libpurple-branding-upstreamUpgrade pidgin-branding-openSUSEUpgrade xfce4-session-branding-basedonopensuseUpgrade leechcraft-azoth-autopasteUpgrade leechcraft-azoth-adiumstylesUpgrade leechcraft-kinotifyUpgrade leechcraft-gmailnotifierUpgrade yast2-branding-basedonopensuseUpgrade libpurple-plugin-mrim-langUpgrade leechcraft-dbusmanagerUpgrade hicolor-icon-theme-branding-basedonopensuseUpgrade leechcraft-gactsUpgrade leechcraft-xproxyUpgrade leechcraft-vroobyUpgrade install-initrd-branding-basedonopensuseUpgrade leechcraft-azoth-herbicideUpgrade leechcraft-vgrabberUpgrade leechcraft-blogique-metidaUpgrade leechcraft-lemonUpgrade leechcraft-otlozhuUpgrade systemd-presets-branding-basedonopensuseUpgrade kdm-branding-basedonopensuseUpgrade leechcraft-azoth-p100qUpgrade libpurple-develUpgrade leechcraft-liznooUpgrade leechcraft-syncerUpgrade midori-branding-basedonopensuseUpgrade kdebase4-workspace-branding-basedonopensuseUpgrade pidgin-plugin-guificationsUpgrade leechcraft-poshuku-fuaUpgrade leechcraft-azoth-juickUpgrade leechcraft-azoth-xooxUpgrade gio-branding-basedonopensuseUpgrade telepathy-plugin-sipeUpgrade xfwm4-branding-basedonopensuseUpgrade xfce4-panel-branding-basedonopensuseUpgrade kdebase3-SuSE-branding-basedonopensuseUpgrade leechcraft-pintabUpgrade leechcraft-monocle-seenUpgrade purple-plugin-packUpgrade wallpaper-branding-basedonopensuseUpgrade leechcraft-poshuku-keywordsUpgrade leechcraft-azoth-shxUpgrade susegreeter-branding-basedonopensuseUpgrade pidgin-guificationsUpgrade PackageKit-branding-basedonopensuseUpgrade leechcraft-azoth-hiliUpgrade leechcraft-netstoremanagerUpgrade splashy-branding-basedonopensuseUpgrade leechcraft-develUpgrade libpurple-plugin-bot-sentryUpgrade leechcraft-newlifeUpgrade leechcraft-azoth-lastseenUpgrade xfce4-splash-branding-basedonopensuseUpgrade leechcraft-azoth-nativeemoticonsUpgrade leechcraft-poshuku-fileschemeUpgrade libpurple-plugin-bot-sentry-langUpgrade leechcraft-hotstreamsUpgrade leechcraft-networkmonitorUpgrade pidgin-plugin-pack-extrasUpgrade pidgin-advanced-sound-notificationUpgrade leechcraft-monocle-muUpgrade leechcraft-azothUpgrade xfdesktop-branding-basedonopensuseUpgrade grub2-branding-basedonopensuseUpgrade pidgin-otrUpgrade leechcraft-tabsessionmanagerUpgrade leechcraft-secmanUpgrade epiphany-branding-basedonopensuseUpgrade leechcraft-netstoremanager-googledriveUpgrade leechcraft-azoth-docUpgrade leechcraft-azoth-autoidlerUpgrade finchUpgrade leechcraft-docUpgrade leechcraft-azoth-rosenthalUpgrade branding-basedonopensuseUpgrade leechcraft-popishuUpgrade finch-develUpgrade libpurple-plugin-facebookchatUpgrade libpurple-plugin-sipeUpgrade leechcraft-aggregator-bodyfetchUpgrade leechcraft-anheroUpgrade libpurpleUpgrade leechcraft-poshukuUpgrade leechcraft-poshuku-fatapeUpgrade leechcraft-seekthruUpgrade libpurple-plugin-packUpgrade libgarcon-branding-basedonopensuseUpgrade libpurple-plugin-openfetionUpgrade MozillaFirefox-branding-basedonopensuseUpgrade xfce4-notifyd-branding-basedonopensuseUpgrade leechcraft-secman-simplestorageUpgrade fcitx-branding-basedonopensuseUpgrade pidgin-mrimUpgrade pidgin-birthday-reminder-langUpgrade leechcraft-poshuku-cleanwebUpgrade leechcraft-tpiUpgrade leechcraft-poshuku-onlinebookmarksUpgrade leechcraft-poshuku-onlinebookmarks-deliciousUpgrade gdm-branding-basedonopensuseUpgrade leechcraft-poshuku-autosearchUpgrade libpurple-branding-basedonopensuseUpgrade sle-sdk-releaseUpgrade leechcraft-glanceUpgrade leechcraft-lmp-graffitiUpgrade ksplashx-branding-basedonopensuseUpgrade leechcraft-azoth-acetamideUpgrade ksplash-qml-branding-basedonopensuseUpgrade libpurple-plugin-openfetion-langUpgrade leechcraft-monocle-fxbUpgrade leechcraft-advancednotificationsUpgrade leechcraft-pogooglueUpgrade leechcraft-shellopenUpgrade libpurple-plugin-skypeUpgrade leechcraft-azoth-xtazyUpgrade pidgin-plugin-packUpgrade leechcraft-azoth-vaderUpgrade leechcraft-azoth-chathistoryUpgrade purple-plugin-pack-langUpgrade libsocialweb-branding-basedonopensuseUpgrade leechcraft-azoth-otroidUpgrade awesome-branding-basedonopensuseUpgrade leechcraft-tabslistUpgrade plymouth-branding-basedonopensuseUpgrade kdelibs4-branding-basedonopensuseUpgrade leechcraft-azoth-birthdaynotifierUpgrade libpurple-meanwhileUpgrade leechcraft-auscrieUpgrade leechcraft-cstpUpgrade xfce4-settings-branding-basedonopensuseUpgrade pidgin-develUpgrade pidginUpgrade leechcraft-azoth-embedmediaUpgrade compiz-branding-basedonopensuseUpgrade leechcraft-azoth-isteriqueUpgrade thunar-volman-branding-basedonopensuseUpgrade e17-branding-basedonopensuseUpgrade leechcraft-lastfmscrobbleUpgrade leechcraft-azoth-zheetUpgrade gconf2-branding-basedonopensuseUpgrade leechcraft-azoth-modnokUpgrade pidgin-plugin-skypeUpgrade leechcraft-sb2Upgrade leechcraft-poshuku-onlinebookmarks-readitlaterUpgrade pidgin-plugin-birthday-reminderUpgrade libexo-1-0-branding-basedonopensuseUpgrade leechcraft-touchstreamsUpgrade pidgin-openfetionUpgrade leechcraft-summaryUpgrade leechcraft-dumbeepUpgrade libpurple-plugin-skype-langUpgrade kdebase4-runtime-branding-basedonopensuseUpgrade libxfce4ui-branding-basedonopensuseUpgrade gfxboot-branding-basedonopensuseUpgrade telepathy-hazeUpgrade lightdm-gtk-greeter-branding-basedonopensuseUpgrade leechcraft-azoth-depesterUpgrade leechcraft-historyholderUpgrade gnome-menus-branding-basedonopensuseUpgrade libpurple-plugin-pack-extrasUpgrade leechcraft-lmp-mp3tunesUpgrade pidgin-birthday-reminderUpgrade leechcraft-kbswitchUpgrade bot-sentryUpgrade leechcraft-azoth-velvetbirdUpgrade pidgin-facebookchatUpgrade pidgin-plugin-advanced-sound-notificationUpgrade dynamic-wallpaper-branding-basedonopensuseUpgrade leechcraft-launchyUpgrade pidgin-sipe | Mar 3, 2014 | Feb 6, 2014 |
| Ubuntu | — | Upgrade libpurple0Upgrade pidgin | Nov 8, 2024 | Feb 6, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub