The STUN protocol implementation in libpurple in Pidgin before 2.10.8 allows remote STUN servers to cause a denial of service (out-of-bounds write operation and application crash) by triggering a socket read error.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade pidgin | Sep 20, 2017 | Feb 6, 2014 |
| Centos_linux | — | Upgrade pidgin-develUpgrade libpurple-tclUpgrade libpurple-develUpgrade finchUpgrade libpurpleUpgrade libpurple-perlUpgrade pidginUpgrade pidgin-docsUpgrade finch-develUpgrade pidgin-perl | Dec 1, 2016 | Feb 6, 2014 |
| Debian | — | Upgrade pidgin | Jul 30, 2024 | Feb 6, 2014 |
| Gentoo Linux | — | Upgrade net-im/pidgin. | Oct 30, 2017 | Feb 6, 2014 |
| Oracle Solaris | — | Upgrade entire to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2 | May 29, 2017 | Feb 6, 2014 |
| Oracle_linux | — | Upgrade pidgin-develUpgrade libpurple-perlUpgrade finch-develUpgrade pidgin-perlUpgrade pidgin-docsUpgrade libpurpleUpgrade finchUpgrade libpurple-tclUpgrade pidginUpgrade libpurple-devel | Oct 16, 2024 | Feb 6, 2014 |
| Suse | — | Upgrade pidginUpgrade leechcraft-networkmonitorUpgrade leechcraft-azoth-juickUpgrade kdebase4-workspace-branding-basedonopensuseUpgrade leechcraft-azoth-hiliUpgrade libgarcon-branding-basedonopensuseUpgrade pidgin-guifications-langUpgrade purple-plugin-packUpgrade leechcraft-aggregatorUpgrade bot-sentryUpgrade xfce4-settings-branding-basedonopensuseUpgrade wallpaper-branding-basedonopensuseUpgrade leechcraft-azoth-nativeemoticonsUpgrade leechcraft-lastfmscrobbleUpgrade hicolor-icon-theme-branding-basedonopensuseUpgrade pidgin-plugin-advanced-sound-notificationUpgrade leechcraft-shaitanUpgrade leechcraft-develUpgrade xfdesktop-branding-basedonopensuseUpgrade libpurple-branding-openSUSEUpgrade PackageKit-branding-basedonopensuseUpgrade pidgin-branding-openSUSEUpgrade leechcraft-secman-simplestorageUpgrade kdelibs4-branding-basedonopensuseUpgrade pidgin-advanced-sound-notification-langUpgrade leechcraft-blogiqueUpgrade leechcraft-azoth-p100qUpgrade leechcraft-hotstreamsUpgrade leechcraft-tabslistUpgrade libpurple-plugin-bot-sentryUpgrade leechcraft-dolozheeUpgrade leechcraft-seekthruUpgrade leechcraft-poshuku-fileschemeUpgrade epiphany-branding-basedonopensuseUpgrade lxde-common-branding-basedonopensuseUpgrade leechcraft-azoth-herbicideUpgrade leechcraft-azoth-keesoUpgrade libpurple-plugin-mrimUpgrade leechcraft-azoth-autopasteUpgrade leechcraft-blogique-metidaUpgrade xfce4-splash-branding-basedonopensuseUpgrade leechcraft-lemonUpgrade leechcraft-netstoremanager-googledriveUpgrade leechcraft-azoth-xooxUpgrade leechcraft-lhtrUpgrade e17-branding-basedonopensuseUpgrade pidgin-guificationsUpgrade leechcraft-vroobyUpgrade leechcraft-poshukuUpgrade leechcraft-azoth-adiumstylesUpgrade pidgin-advanced-sound-notificationUpgrade leechcraft-vgrabberUpgrade leechcraftUpgrade leechcraft-historyholderUpgrade kdm-branding-basedonopensuseUpgrade leechcraft-knowhowUpgrade gtk2-branding-basedonopensuseUpgrade telepathy-plugin-sipeUpgrade grub2-branding-basedonopensuseUpgrade pidgin-plugin-pack-extrasUpgrade leechcraft-lmp-dumbsyncUpgrade leechcraft-choroidUpgrade pidgin-plugin-packUpgrade leechcraft-azoth-modnokUpgrade leechcraft-azoth-shxUpgrade leechcraft-azoth-rosenthalUpgrade leechcraft-azoth-standardstylesUpgrade libpurple-plugin-mrim-langUpgrade leechcraft-xproxyUpgrade pidgin-birthday-reminderUpgrade leechcraft-azoth-metacontactsUpgrade leechcraft-newlifeUpgrade pidgin-plugin-embeddedvideoUpgrade yast2-qt-branding-basedonopensuseUpgrade leechcraft-monocle-pdfUpgrade pidgin-plugin-guificationsUpgrade xfce4-panel-branding-basedonopensuseUpgrade pidgin-birthday-reminder-langUpgrade libpurple-plugin-bot-sentry-langUpgrade kdebase3-SuSE-branding-basedonopensuseUpgrade leechcraft-azoth-lastseenUpgrade leechcraft-blogique-hestiaUpgrade leechcraft-azothUpgrade leechcraft-monocle-postrusUpgrade libpurple-branding-upstreamUpgrade leechcraft-azoth-autoidlerUpgrade kdebase4-runtime-branding-basedonopensuseUpgrade gcin-branding-basedonopensuseUpgrade leechcraft-liznooUpgrade leechcraft-syncerUpgrade libreoffice-branding-basedonopensuseUpgrade leechcraft-advancednotificationsUpgrade libpurple-plugin-skype-langUpgrade leechcraft-gactsUpgrade leechcraft-bittorrentUpgrade install-initrd-branding-basedonopensuseUpgrade libpurple-develUpgrade leechcraft-netstoremanagerUpgrade leechcraft-gmailnotifierUpgrade leechcraft-lmpUpgrade leechcraft-lackmanUpgrade gdm-branding-basedonopensuseUpgrade lightdm-gtk-greeter-branding-basedonopensuseUpgrade libpurple-plugin-packUpgrade pidgin-openfetionUpgrade leechcraft-azoth-embedmediaUpgrade purple-plugin-pack-langUpgrade pidgin-sipeUpgrade fcitx-branding-basedonopensuseUpgrade leechcraft-poshuku-cleanwebUpgrade libpurple-plugin-facebookchatUpgrade pidgin-develUpgrade sle-sdk-releaseUpgrade MozillaFirefox-branding-basedonopensuseUpgrade leechcraft-poshuku-onlinebookmarks-readitlaterUpgrade leechcraft-monocleUpgrade leechcraft-anheroUpgrade pidgin-mrimUpgrade leechcraft-tpiUpgrade thunar-volman-branding-basedonopensuseUpgrade leechcraft-lmp-graffitiUpgrade xfce4-session-branding-basedonopensuseUpgrade leechcraft-secmanUpgrade splashy-branding-basedonopensuseUpgrade compiz-branding-basedonopensuseUpgrade dynamic-wallpaper-branding-basedonopensuseUpgrade systemd-presets-branding-basedonopensuseUpgrade leechcraft-azoth-vaderUpgrade leechcraft-poshuku-onlinebookmarksUpgrade leechcraft-azoth-velvetbirdUpgrade leechcraft-monocle-fxbUpgrade gtk3-branding-basedonopensuseUpgrade leechcraft-musiczombieUpgrade libxfce4ui-branding-basedonopensuseUpgrade leechcraft-hotsensorsUpgrade leechcraft-poshuku-keywordsUpgrade leechcraft-aggregator-bodyfetchUpgrade gnome-menus-branding-basedonopensuseUpgrade leechcraft-shellopenUpgrade gio-branding-basedonopensuseUpgrade libexo-1-0-branding-basedonopensuseUpgrade leechcraft-kinotifyUpgrade leechcraft-azoth-depesterUpgrade pidgin-plugin-skypeUpgrade libpurple-langUpgrade leechcraft-summaryUpgrade leechcraft-poshuku-autosearchUpgrade leechcraft-monocle-seenUpgrade leechcraft-lmp-mp3tunesUpgrade leechcraft-popishuUpgrade libpurple-meanwhileUpgrade leechcraft-poshuku-onlinebookmarks-deliciousUpgrade leechcraft-tabsessionmanagerUpgrade xfce4-notifyd-branding-basedonopensuseUpgrade leechcraft-poshuku-fatapeUpgrade leechcraft-pintabUpgrade leechcraft-azoth-zheetUpgrade leechcraft-docUpgrade yast2-branding-basedonopensuseUpgrade leechcraft-cstpUpgrade libpurple-branding-basedonopensuseUpgrade pidgin-facebookchatUpgrade libpurple-plugin-openfetion-langUpgrade leechcraft-azoth-birthdaynotifierUpgrade awesome-branding-basedonopensuseUpgrade leechcraft-azoth-acetamideUpgrade leechcraft-sb2Upgrade gfxboot-branding-basedonopensuseUpgrade leechcraft-kbswitchUpgrade leechcraft-poshuku-fuaUpgrade libpurpleUpgrade leechcraft-otlozhuUpgrade libpurple-tclUpgrade leechcraft-azoth-chathistoryUpgrade pidgin-otrUpgrade libsocialweb-branding-basedonopensuseUpgrade leechcraft-azoth-isteriqueUpgrade leechcraft-pogooglueUpgrade leechcraft-dumbeepUpgrade leechcraft-azoth-docUpgrade libpurple-plugin-sipeUpgrade xfwm4-branding-basedonopensuseUpgrade ksplashx-branding-basedonopensuseUpgrade pidgin-embeddedvideoUpgrade leechcraft-touchstreamsUpgrade leechcraft-deadlyricsUpgrade gconf2-branding-basedonopensuseUpgrade leechcraft-monocle-docUpgrade finchUpgrade leechcraft-azoth-otroidUpgrade libpurple-plugin-skypeUpgrade telepathy-hazeUpgrade leechcraft-dbusmanagerUpgrade leechcraft-monocle-muUpgrade skype4pidginUpgrade leechcraft-azoth-xtazyUpgrade finch-develUpgrade plymouth-branding-basedonopensuseUpgrade leechcraft-auscrieUpgrade pidgin-plugin-birthday-reminderUpgrade leechcraft-glanceUpgrade branding-basedonopensuseUpgrade susegreeter-branding-basedonopensuseUpgrade libpurple-plugin-openfetionUpgrade libpurple-plugin-pack-extrasUpgrade ksplash-qml-branding-basedonopensuseUpgrade midori-branding-basedonopensuseUpgrade leechcraft-launchy | Mar 3, 2014 | Feb 6, 2014 |
| Ubuntu | — | Upgrade pidginUpgrade libpurple0 | Nov 8, 2024 | Feb 6, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub