markup.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.10 allows remote servers to cause a denial of service (application crash) via a large length value in an emoticon response.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade pidgin-develUpgrade libpurple-tclUpgrade finch-develUpgrade libpurple-perlUpgrade pidgin-perlUpgrade pidginUpgrade libpurpleUpgrade pidgin-debuginfoUpgrade finchUpgrade libpurple-devel | Aug 28, 2019 | Oct 29, 2014 |
| Debian | — | Upgrade pidgin | Jul 30, 2024 | Oct 29, 2014 |
| Freebsd | — | Upgrade libpurpleUpgrade pidgin | Dec 10, 2025 | Oct 24, 2014 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libpurple | Nov 30, 2017 | Oct 29, 2014 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libpurple | Nov 30, 2017 | Oct 29, 2014 |
| Oracle Solaris | — | Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.3.0.0.28.0 on Solaris 11.3Upgrade communication/im/pidgin to version 2.10.11-0.175.2.11.0.3.0 on Solaris 11.2 | May 29, 2017 | Oct 29, 2014 |
| Oracle_linux | — | Upgrade libpurple-tclUpgrade libpurple-perlUpgrade libpurple-develUpgrade pidginUpgrade finch-develUpgrade libpurpleUpgrade finchUpgrade pidgin-develUpgrade pidgin-perl | Aug 8, 2017 | Oct 22, 2014 |
| Redhat_linux | — | Upgrade finchUpgrade libpurple-tclNo solution existsUpgrade pidginUpgrade libpurpleUpgrade libpurple-develUpgrade pidgin-perlUpgrade libpurple-perlUpgrade pidgin-develUpgrade pidgin-debuginfoUpgrade finch-devel | Aug 3, 2017 | Oct 29, 2014 |
| Suse | — | Upgrade pidginUpgrade libpurple-plugin-sametimeUpgrade libpurple-develUpgrade libpurpleUpgrade finchUpgrade libpurple-meanwhileUpgrade libpurple-branding-upstreamUpgrade pidgin-develUpgrade finch-develUpgrade libpurple-tclUpgrade libpurple-lang | Dec 18, 2015 | Oct 29, 2014 |
| Ubuntu | — | Upgrade pidginUpgrade libpurple0 | Nov 8, 2024 | Oct 29, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub