An out-of-bounds write flaw was found in the way Pidgin before 2.12.0 processed XML content. A malicious remote server could potentially use this flaw to crash Pidgin or execute arbitrary code in the context of the pidgin process.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade pidgin | Jul 27, 2018 | Jul 27, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 27, 2018 |
| Centos_linux | — | Upgrade libpurple-perlUpgrade pidgin-develUpgrade pidgin-debuginfoUpgrade finch-develUpgrade finchUpgrade libpurple-tclUpgrade libpurpleUpgrade libpurple-develUpgrade pidginUpgrade pidgin-perl | Aug 28, 2019 | Jul 27, 2018 |
| Debian | — | Upgrade pidgin | Mar 11, 2017 | Mar 10, 2017 |
| Gentoo Linux | — | Upgrade net-im/pidgin. | Oct 30, 2017 | Jun 6, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libpurple | Jan 18, 2018 | Mar 10, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libpurple | Jan 18, 2018 | Mar 10, 2017 |
| Oracle_linux | — | Upgrade finch-develUpgrade pidginUpgrade pidgin-perlUpgrade finchUpgrade libpurple-tclUpgrade libpurple-develUpgrade libpurpleUpgrade libpurple-perlUpgrade pidgin-devel | Aug 8, 2017 | Mar 10, 2017 |
| Redhat_linux | — | Upgrade libpurple-perlUpgrade pidgin-debuginfoUpgrade pidgin-develUpgrade libpurple-develUpgrade pidginUpgrade pidgin-perlNo solution existsUpgrade libpurpleUpgrade finchUpgrade finch-develUpgrade libpurple-tcl | Aug 3, 2017 | Mar 10, 2017 |
| Suse | — | Upgrade libpurpleUpgrade libpurple-branding-upstreamUpgrade libpurple-develUpgrade libpurple-plugin-sametimeUpgrade pidginUpgrade pidgin-develUpgrade finch-develUpgrade libpurple-tclUpgrade finchUpgrade libpurple-lang | Apr 5, 2017 | Mar 10, 2017 |
| Ubuntu | — | Upgrade libpurple0 | Mar 15, 2017 | Mar 10, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub