nmevent.c in the Novell GroupWise protocol plugin in libpurple in Pidgin before 2.10.10 allows remote servers to cause a denial of service (application crash) via a crafted server message that triggers a large memory allocation.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libpurple-tclUpgrade pidgin-debuginfoUpgrade libpurple-develUpgrade libpurpleUpgrade finchUpgrade pidginUpgrade finch-develUpgrade libpurple-perlUpgrade pidgin-perlUpgrade pidgin-devel | Aug 28, 2019 | Oct 29, 2014 |
| Debian | — | Upgrade pidgin | Jul 30, 2024 | Oct 29, 2014 |
| Freebsd | — | Upgrade pidginUpgrade libpurple | Dec 10, 2025 | Oct 24, 2014 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libpurple | Nov 30, 2017 | Oct 29, 2014 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libpurple | Nov 30, 2017 | Oct 29, 2014 |
| Oracle Solaris | — | Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.3.0.0.28.0 on Solaris 11.3Upgrade communication/im/pidgin to version 2.10.11-0.175.2.11.0.3.0 on Solaris 11.2 | May 29, 2017 | Oct 29, 2014 |
| Oracle_linux | — | Upgrade libpurpleUpgrade finch-develUpgrade libpurple-tclUpgrade finchUpgrade pidgin-develUpgrade pidgin-perlUpgrade libpurple-develUpgrade libpurple-perlUpgrade pidgin | Aug 8, 2017 | Oct 22, 2014 |
| Redhat_linux | — | Upgrade pidgin-develUpgrade libpurpleUpgrade finchUpgrade libpurple-tclUpgrade pidginUpgrade libpurple-perlUpgrade pidgin-debuginfoUpgrade libpurple-develUpgrade finch-develUpgrade pidgin-perlNo solution exists | Aug 3, 2017 | Oct 29, 2014 |
| Suse | — | Upgrade libpurple-meanwhileUpgrade finch-develUpgrade finchUpgrade libpurple-tclUpgrade pidgin-develUpgrade libpurple-plugin-sametimeUpgrade libpurpleUpgrade libpurple-develUpgrade libpurple-branding-upstreamUpgrade libpurple-langUpgrade pidgin | Dec 18, 2015 | Oct 29, 2014 |
| Ubuntu | — | Upgrade libpurple0Upgrade pidgin | Nov 8, 2024 | Oct 29, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub