Integer overflow in libpurple/protocols/gg/lib/http.c in the Gadu-Gadu (gg) parser in Pidgin before 2.10.8 allows remote attackers to have an unspecified impact via a large Content-Length value, which triggers a buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade pidgin | Sep 20, 2017 | Feb 6, 2014 |
| Centos_linux | — | Upgrade libpurple-tclUpgrade libpurpleUpgrade pidgin-perlUpgrade libpurple-develUpgrade libpurple-perlUpgrade pidginUpgrade pidgin-docsUpgrade finch-develUpgrade finchUpgrade pidgin-devel | Dec 1, 2016 | Feb 6, 2014 |
| Debian | — | Upgrade libgaduUpgrade pidgin | Jul 30, 2024 | Feb 6, 2014 |
| Gentoo Linux | — | Upgrade net-im/pidgin.Upgrade net-libs/libgadu. | Oct 30, 2017 | Feb 6, 2014 |
| Oracle Solaris | — | Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2Upgrade entire to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2 | May 29, 2017 | Feb 6, 2014 |
| Oracle_linux | — | Upgrade finch-develUpgrade libpurple-perlUpgrade pidgin-develUpgrade libpurpleUpgrade pidgin-docsUpgrade pidgin-perlUpgrade finchUpgrade libpurple-tclUpgrade pidginUpgrade libpurple-devel | Oct 16, 2024 | Feb 6, 2014 |
| Suse | — | Upgrade leechcraft-azoth-keesoUpgrade kdebase4-runtime-branding-basedonopensuseUpgrade leechcraft-azoth-herbicideUpgrade leechcraft-lastfmscrobbleUpgrade libpurple-meanwhileUpgrade pidgin-birthday-reminderUpgrade grub2-branding-basedonopensuseUpgrade pidgin-plugin-packUpgrade epiphany-branding-basedonopensuseUpgrade wallpaper-branding-basedonopensuseUpgrade xfwm4-branding-basedonopensuseUpgrade purple-plugin-pack-langUpgrade ksplash-qml-branding-basedonopensuseUpgrade leechcraft-vgrabberUpgrade awesome-branding-basedonopensuseUpgrade leechcraft-aggregatorUpgrade leechcraft-azoth-otroidUpgrade libpurple-plugin-facebookchatUpgrade leechcraft-poshuku-onlinebookmarksUpgrade kdelibs4-branding-basedonopensuseUpgrade libpurpleUpgrade libpurple-plugin-skypeUpgrade leechcraft-tpiUpgrade pidgin-plugin-embeddedvideoUpgrade libsocialweb-branding-basedonopensuseUpgrade leechcraft-azoth-rosenthalUpgrade libpurple-plugin-mrim-langUpgrade libgarcon-branding-basedonopensuseUpgrade kdm-branding-basedonopensuseUpgrade leechcraft-dolozheeUpgrade leechcraft-monocle-muUpgrade leechcraft-launchyUpgrade leechcraft-netstoremanager-googledriveUpgrade leechcraft-gmailnotifierUpgrade libpurple-plugin-openfetionUpgrade leechcraft-syncerUpgrade kdebase3-SuSE-branding-basedonopensuseUpgrade leechcraft-secmanUpgrade libreoffice-branding-basedonopensuseUpgrade leechcraft-seekthruUpgrade leechcraft-popishuUpgrade gtk3-branding-basedonopensuseUpgrade libpurple-plugin-mrimUpgrade finchUpgrade lightdm-gtk-greeter-branding-basedonopensuseUpgrade leechcraft-azoth-p100qUpgrade leechcraft-azoth-autopasteUpgrade install-initrd-branding-basedonopensuseUpgrade leechcraft-poshuku-autosearchUpgrade leechcraft-networkmonitorUpgrade leechcraft-anheroUpgrade leechcraft-shellopenUpgrade leechcraft-monocle-fxbUpgrade libpurple-develUpgrade leechcraft-azoth-xtazyUpgrade libpurple-branding-basedonopensuseUpgrade leechcraft-vroobyUpgrade thunar-volman-branding-basedonopensuseUpgrade leechcraft-poshuku-onlinebookmarks-readitlaterUpgrade pidgin-plugin-guificationsUpgrade leechcraft-azoth-depesterUpgrade leechcraft-azoth-hiliUpgrade PackageKit-branding-basedonopensuseUpgrade pidginUpgrade libxfce4ui-branding-basedonopensuseUpgrade pidgin-advanced-sound-notification-langUpgrade leechcraft-poshuku-fatapeUpgrade leechcraft-secman-simplestorageUpgrade pidgin-sipeUpgrade leechcraft-summaryUpgrade gconf2-branding-basedonopensuseUpgrade leechcraft-blogique-metidaUpgrade telepathy-plugin-sipeUpgrade leechcraft-sb2Upgrade xfce4-splash-branding-basedonopensuseUpgrade leechcraft-pogooglueUpgrade e17-branding-basedonopensuseUpgrade leechcraft-lmp-mp3tunesUpgrade leechcraft-bittorrentUpgrade susegreeter-branding-basedonopensuseUpgrade pidgin-guifications-langUpgrade leechcraft-hotsensorsUpgrade leechcraft-azoth-autoidlerUpgrade pidgin-openfetionUpgrade leechcraft-kbswitchUpgrade leechcraft-choroidUpgrade leechcraft-azothUpgrade leechcraft-azoth-chathistoryUpgrade leechcraft-poshukuUpgrade leechcraft-dumbeepUpgrade pidgin-plugin-advanced-sound-notificationUpgrade gtk2-branding-basedonopensuseUpgrade xfce4-session-branding-basedonopensuseUpgrade leechcraft-deadlyricsUpgrade pidgin-guificationsUpgrade pidgin-birthday-reminder-langUpgrade leechcraft-dbusmanagerUpgrade lxde-common-branding-basedonopensuseUpgrade libpurple-plugin-openfetion-langUpgrade leechcraft-touchstreamsUpgrade leechcraft-historyholderUpgrade leechcraft-glanceUpgrade leechcraft-gactsUpgrade leechcraft-aggregator-bodyfetchUpgrade ksplashx-branding-basedonopensuseUpgrade leechcraft-docUpgrade libpurple-plugin-pack-extrasUpgrade telepathy-hazeUpgrade leechcraft-advancednotificationsUpgrade libpurple-plugin-bot-sentryUpgrade yast2-branding-basedonopensuseUpgrade leechcraft-lemonUpgrade libexo-1-0-branding-basedonopensuseUpgrade libgadu3Upgrade branding-basedonopensuseUpgrade libpurple-plugin-bot-sentry-langUpgrade leechcraftUpgrade xfdesktop-branding-basedonopensuseUpgrade pidgin-embeddedvideoUpgrade leechcraft-pintabUpgrade leechcraft-azoth-xooxUpgrade leechcraft-knowhowUpgrade leechcraft-azoth-adiumstylesUpgrade leechcraft-lmpUpgrade leechcraft-azoth-shxUpgrade leechcraft-azoth-metacontactsUpgrade libpurple-plugin-packUpgrade pidgin-plugin-birthday-reminderUpgrade libpurple-langUpgrade libgadu-develUpgrade leechcraft-monocle-pdfUpgrade xfce4-notifyd-branding-basedonopensuseUpgrade leechcraft-azoth-zheetUpgrade leechcraft-monocleUpgrade leechcraft-azoth-juickUpgrade compiz-branding-basedonopensuseUpgrade xfce4-settings-branding-basedonopensuseUpgrade leechcraft-poshuku-cleanwebUpgrade libpurple-plugin-skype-langUpgrade leechcraft-azoth-vaderUpgrade finch-develUpgrade leechcraft-azoth-standardstylesUpgrade libpurple-plugin-sipeUpgrade leechcraft-poshuku-keywordsUpgrade leechcraft-poshuku-fileschemeUpgrade plymouth-branding-basedonopensuseUpgrade leechcraft-newlifeUpgrade leechcraft-develUpgrade leechcraft-lmp-graffitiUpgrade systemd-presets-branding-basedonopensuseUpgrade leechcraft-lmp-dumbsyncUpgrade leechcraft-monocle-seenUpgrade leechcraft-blogiqueUpgrade leechcraft-monocle-postrusUpgrade fcitx-branding-basedonopensuseUpgrade gdm-branding-basedonopensuseUpgrade dynamic-wallpaper-branding-basedonopensuseUpgrade leechcraft-monocle-docUpgrade leechcraft-azoth-docUpgrade leechcraft-azoth-acetamideUpgrade leechcraft-azoth-birthdaynotifierUpgrade gcin-branding-basedonopensuseUpgrade leechcraft-musiczombieUpgrade purple-plugin-packUpgrade pidgin-branding-openSUSEUpgrade leechcraft-azoth-velvetbirdUpgrade leechcraft-lackmanUpgrade leechcraft-kinotifyUpgrade MozillaFirefox-branding-basedonopensuseUpgrade gnome-menus-branding-basedonopensuseUpgrade pidgin-advanced-sound-notificationUpgrade leechcraft-auscrieUpgrade gio-branding-basedonopensuseUpgrade leechcraft-azoth-modnokUpgrade bot-sentryUpgrade leechcraft-shaitanUpgrade sle-sdk-releaseUpgrade xfce4-panel-branding-basedonopensuseUpgrade leechcraft-azoth-isteriqueUpgrade leechcraft-azoth-embedmediaUpgrade pidgin-mrimUpgrade leechcraft-netstoremanagerUpgrade pidgin-plugin-skypeUpgrade pidgin-facebookchatUpgrade leechcraft-azoth-lastseenUpgrade libpurple-branding-openSUSEUpgrade yast2-qt-branding-basedonopensuseUpgrade pidgin-otrUpgrade leechcraft-azoth-nativeemoticonsUpgrade pidgin-plugin-pack-extrasUpgrade leechcraft-poshuku-fuaUpgrade leechcraft-liznooUpgrade leechcraft-tabslistUpgrade hicolor-icon-theme-branding-basedonopensuseUpgrade skype4pidginUpgrade leechcraft-blogique-hestiaUpgrade libpurple-branding-upstreamUpgrade leechcraft-poshuku-onlinebookmarks-deliciousUpgrade leechcraft-otlozhuUpgrade kdebase4-workspace-branding-basedonopensuseUpgrade splashy-branding-basedonopensuseUpgrade libgaduUpgrade leechcraft-cstpUpgrade leechcraft-tabsessionmanagerUpgrade leechcraft-lhtrUpgrade midori-branding-basedonopensuseUpgrade gfxboot-branding-basedonopensuseUpgrade libpurple-tclUpgrade pidgin-develUpgrade leechcraft-hotstreamsUpgrade leechcraft-xproxy | Mar 3, 2014 | Feb 6, 2014 |
| Ubuntu | — | Upgrade libpurple0Upgrade pidginUpgrade libgadu3 | Nov 8, 2024 | Feb 6, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub