The XMPP protocol plugin in libpurple in Pidgin before 2.10.8 does not properly determine whether the from address in an iq reply is consistent with the to address in an iq request, which allows remote attackers to spoof iq traffic or cause a denial of service (NULL pointer dereference and application crash) via a crafted reply.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade pidgin | Sep 20, 2017 | Feb 6, 2014 |
| Centos_linux | — | Upgrade libpurple-perlUpgrade libpurple-develUpgrade libpurple-tclUpgrade libpurpleUpgrade pidgin-perlUpgrade finchUpgrade pidgin-docsUpgrade finch-develUpgrade pidginUpgrade pidgin-devel | Dec 1, 2016 | Feb 6, 2014 |
| Debian | — | Upgrade pidgin | Jul 30, 2024 | Feb 6, 2014 |
| Gentoo Linux | — | Upgrade net-im/pidgin. | Oct 30, 2017 | Feb 6, 2014 |
| Oracle Solaris | — | Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2Upgrade entire to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2 | May 29, 2017 | Feb 6, 2014 |
| Oracle_linux | — | Upgrade pidgin-develUpgrade libpurple-perlUpgrade pidgin-perlUpgrade finch-develUpgrade pidgin-docsUpgrade finchUpgrade libpurpleUpgrade pidginUpgrade libpurple-develUpgrade libpurple-tcl | Oct 16, 2024 | Feb 6, 2014 |
| Suse | — | Upgrade xfce4-splash-branding-basedonopensuseUpgrade leechcraft-monocle-docUpgrade leechcraft-monocle-pdfUpgrade libpurple-langUpgrade leechcraft-sb2Upgrade libpurple-tclUpgrade leechcraft-touchstreamsUpgrade finch-develUpgrade kdebase3-SuSE-branding-basedonopensuseUpgrade pidgin-mrimUpgrade pidgin-branding-openSUSEUpgrade pidgin-advanced-sound-notificationUpgrade dynamic-wallpaper-branding-basedonopensuseUpgrade leechcraft-anheroUpgrade branding-basedonopensuseUpgrade bot-sentryUpgrade leechcraft-launchyUpgrade libpurple-plugin-mrimUpgrade splashy-branding-basedonopensuseUpgrade leechcraft-kbswitchUpgrade xfce4-panel-branding-basedonopensuseUpgrade leechcraft-shaitanUpgrade leechcraft-azoth-herbicideUpgrade leechcraft-poshuku-onlinebookmarks-deliciousUpgrade libpurpleUpgrade libxfce4ui-branding-basedonopensuseUpgrade leechcraft-advancednotificationsUpgrade midori-branding-basedonopensuseUpgrade libpurple-plugin-skype-langUpgrade leechcraft-azoth-keesoUpgrade purple-plugin-packUpgrade finchUpgrade leechcraft-gmailnotifierUpgrade leechcraft-lmp-mp3tunesUpgrade leechcraft-knowhowUpgrade leechcraft-netstoremanager-googledriveUpgrade leechcraft-poshuku-fuaUpgrade pidgin-plugin-pack-extrasUpgrade epiphany-branding-basedonopensuseUpgrade leechcraft-deadlyricsUpgrade leechcraftUpgrade leechcraft-poshukuUpgrade leechcraft-aggregatorUpgrade leechcraft-monocleUpgrade leechcraft-tabslistUpgrade leechcraft-azoth-hiliUpgrade gnome-menus-branding-basedonopensuseUpgrade leechcraft-vroobyUpgrade leechcraft-otlozhuUpgrade pidgin-birthday-reminder-langUpgrade leechcraft-azoth-shxUpgrade awesome-branding-basedonopensuseUpgrade pidgin-plugin-embeddedvideoUpgrade libgarcon-branding-basedonopensuseUpgrade install-initrd-branding-basedonopensuseUpgrade leechcraft-shellopenUpgrade libreoffice-branding-basedonopensuseUpgrade leechcraft-azoth-modnokUpgrade libsocialweb-branding-basedonopensuseUpgrade gtk2-branding-basedonopensuseUpgrade leechcraft-blogique-metidaUpgrade pidgin-advanced-sound-notification-langUpgrade lightdm-gtk-greeter-branding-basedonopensuseUpgrade leechcraft-azoth-adiumstylesUpgrade ksplashx-branding-basedonopensuseUpgrade leechcraft-azoth-standardstylesUpgrade fcitx-branding-basedonopensuseUpgrade leechcraft-historyholderUpgrade leechcraft-azoth-birthdaynotifierUpgrade telepathy-plugin-sipeUpgrade leechcraft-blogique-hestiaUpgrade leechcraft-azoth-xtazyUpgrade e17-branding-basedonopensuseUpgrade leechcraft-azoth-chathistoryUpgrade leechcraft-monocle-postrusUpgrade MozillaFirefox-branding-basedonopensuseUpgrade leechcraft-dolozheeUpgrade xfce4-settings-branding-basedonopensuseUpgrade kdebase4-runtime-branding-basedonopensuseUpgrade leechcraft-monocle-seenUpgrade leechcraft-popishuUpgrade leechcraft-poshuku-fatapeUpgrade pidgin-plugin-packUpgrade pidgin-plugin-guificationsUpgrade leechcraft-bittorrentUpgrade leechcraft-azoth-autopasteUpgrade pidgin-develUpgrade leechcraft-tpiUpgrade libpurple-meanwhileUpgrade pidgin-sipeUpgrade leechcraft-choroidUpgrade gfxboot-branding-basedonopensuseUpgrade ksplash-qml-branding-basedonopensuseUpgrade skype4pidginUpgrade libpurple-plugin-bot-sentry-langUpgrade leechcraft-dbusmanagerUpgrade leechcraft-musiczombieUpgrade leechcraft-secman-simplestorageUpgrade pidgin-plugin-advanced-sound-notificationUpgrade leechcraft-networkmonitorUpgrade leechcraft-azoth-lastseenUpgrade systemd-presets-branding-basedonopensuseUpgrade yast2-qt-branding-basedonopensuseUpgrade pidgin-otrUpgrade leechcraft-azoth-depesterUpgrade kdelibs4-branding-basedonopensuseUpgrade leechcraft-lmpUpgrade purple-plugin-pack-langUpgrade leechcraft-poshuku-onlinebookmarksUpgrade compiz-branding-basedonopensuseUpgrade pidgin-guificationsUpgrade leechcraft-poshuku-autosearchUpgrade leechcraft-azoth-p100qUpgrade leechcraft-glanceUpgrade xfwm4-branding-basedonopensuseUpgrade leechcraft-gactsUpgrade leechcraft-azoth-xooxUpgrade sle-sdk-releaseUpgrade leechcraft-azoth-autoidlerUpgrade libpurple-branding-openSUSEUpgrade leechcraft-lhtrUpgrade leechcraft-lastfmscrobbleUpgrade leechcraft-azoth-docUpgrade leechcraft-azoth-acetamideUpgrade leechcraft-summaryUpgrade leechcraft-poshuku-keywordsUpgrade gio-branding-basedonopensuseUpgrade leechcraft-azoth-zheetUpgrade leechcraft-syncerUpgrade leechcraft-azoth-nativeemoticonsUpgrade leechcraft-lmp-graffitiUpgrade grub2-branding-basedonopensuseUpgrade telepathy-hazeUpgrade leechcraft-liznooUpgrade pidgin-birthday-reminderUpgrade yast2-branding-basedonopensuseUpgrade leechcraft-poshuku-cleanwebUpgrade kdebase4-workspace-branding-basedonopensuseUpgrade leechcraft-auscrieUpgrade pidgin-openfetionUpgrade leechcraft-azothUpgrade wallpaper-branding-basedonopensuseUpgrade xfdesktop-branding-basedonopensuseUpgrade leechcraft-newlifeUpgrade libpurple-plugin-facebookchatUpgrade libpurple-branding-basedonopensuseUpgrade libpurple-plugin-packUpgrade hicolor-icon-theme-branding-basedonopensuseUpgrade libexo-1-0-branding-basedonopensuseUpgrade leechcraft-poshuku-fileschemeUpgrade susegreeter-branding-basedonopensuseUpgrade leechcraft-azoth-otroidUpgrade pidgin-facebookchatUpgrade leechcraft-xproxyUpgrade leechcraft-poshuku-onlinebookmarks-readitlaterUpgrade leechcraft-azoth-isteriqueUpgrade leechcraft-azoth-velvetbirdUpgrade libpurple-plugin-openfetionUpgrade leechcraft-azoth-rosenthalUpgrade leechcraft-blogiqueUpgrade pidgin-plugin-birthday-reminderUpgrade xfce4-notifyd-branding-basedonopensuseUpgrade leechcraft-kinotifyUpgrade thunar-volman-branding-basedonopensuseUpgrade gcin-branding-basedonopensuseUpgrade gdm-branding-basedonopensuseUpgrade leechcraft-lmp-dumbsyncUpgrade leechcraft-secmanUpgrade libpurple-develUpgrade xfce4-session-branding-basedonopensuseUpgrade kdm-branding-basedonopensuseUpgrade leechcraft-pogooglueUpgrade leechcraft-seekthruUpgrade leechcraft-lemonUpgrade leechcraft-vgrabberUpgrade leechcraft-dumbeepUpgrade leechcraft-azoth-juickUpgrade pidgin-guifications-langUpgrade libpurple-plugin-sipeUpgrade gconf2-branding-basedonopensuseUpgrade leechcraft-lackmanUpgrade libpurple-plugin-bot-sentryUpgrade leechcraft-develUpgrade leechcraft-azoth-vaderUpgrade pidgin-embeddedvideoUpgrade libpurple-plugin-skypeUpgrade gtk3-branding-basedonopensuseUpgrade libpurple-plugin-mrim-langUpgrade leechcraft-aggregator-bodyfetchUpgrade leechcraft-cstpUpgrade leechcraft-docUpgrade leechcraft-azoth-embedmediaUpgrade libpurple-plugin-openfetion-langUpgrade PackageKit-branding-basedonopensuseUpgrade leechcraft-tabsessionmanagerUpgrade lxde-common-branding-basedonopensuseUpgrade leechcraft-monocle-fxbUpgrade pidginUpgrade leechcraft-azoth-metacontactsUpgrade leechcraft-hotsensorsUpgrade libpurple-plugin-pack-extrasUpgrade leechcraft-netstoremanagerUpgrade leechcraft-pintabUpgrade pidgin-plugin-skypeUpgrade leechcraft-monocle-muUpgrade plymouth-branding-basedonopensuseUpgrade libpurple-branding-upstreamUpgrade leechcraft-hotstreams | Mar 3, 2014 | Feb 6, 2014 |
| Ubuntu | — | Upgrade libpurple0Upgrade pidgin | Nov 8, 2024 | Feb 6, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub