An out-of-bounds write flaw was found in the way Pidgin before 2.12.0 processed XML content. A malicious remote server could potentially use this flaw to crash Pidgin or execute arbitrary code in the context of the pidgin process.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-pidgin | Jul 27, 2018 | Jul 27, 2018 | |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Jul 27, 2018 | |
| Centos_linux | — | centos-upgrade-finchcentos-upgrade-finch-develcentos-upgrade-libpurplecentos-upgrade-libpurple-develcentos-upgrade-libpurple-perlcentos-upgrade-libpurple-tclcentos-upgrade-pidgincentos-upgrade-pidgin-debuginfocentos-upgrade-pidgin-develcentos-upgrade-pidgin-perl | Aug 28, 2019 | Jul 27, 2018 |
| Debian | debian-upgrade-pidgin | Mar 11, 2017 | Mar 10, 2017 | |
| Gentoo Linux | gentoo-linux-upgrade-net-im-pidgin | Oct 30, 2017 | Jun 6, 2017 | |
| Huawei Euleros 2_0_sp1 | huawei-euleros-2_0_sp1-upgrade-libpurple | Jan 18, 2018 | Mar 10, 2017 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-libpurple | Jan 18, 2018 | Mar 10, 2017 | |
| Oracle_linux | — | oracle-linux-upgrade-finchoracle-linux-upgrade-finch-develoracle-linux-upgrade-libpurpleoracle-linux-upgrade-libpurple-develoracle-linux-upgrade-libpurple-perloracle-linux-upgrade-libpurple-tcloracle-linux-upgrade-pidginoracle-linux-upgrade-pidgin-develoracle-linux-upgrade-pidgin-perl | Aug 8, 2017 | Mar 10, 2017 |
| Redhat_linux | — | redhat-upgrade-finchredhat-upgrade-finch-develredhat-upgrade-libpurpleredhat-upgrade-libpurple-develredhat-upgrade-libpurple-perlredhat-upgrade-libpurple-tclredhat-upgrade-pidginredhat-upgrade-pidgin-debuginforedhat-upgrade-pidgin-develredhat-upgrade-pidgin-perl | Aug 3, 2017 | Mar 10, 2017 |
| Suse | — | suse-upgrade-finchsuse-upgrade-finch-develsuse-upgrade-libpurplesuse-upgrade-libpurple-branding-upstreamsuse-upgrade-libpurple-develsuse-upgrade-libpurple-langsuse-upgrade-libpurple-plugin-sametimesuse-upgrade-libpurple-tclsuse-upgrade-pidginsuse-upgrade-pidgin-devel | Apr 5, 2017 | Mar 10, 2017 |
| Ubuntu | ubuntu-upgrade-libpurple0 | Mar 15, 2017 | Mar 10, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub