The jabber_idn_validate function in jutil.c in the Jabber protocol plugin in libpurple in Pidgin before 2.10.10 allows remote attackers to obtain sensitive information from process memory via a crafted XMPP message.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade pidgin-debuginfoUpgrade libpurple-perlUpgrade finch-develUpgrade pidgin-develUpgrade libpurpleUpgrade pidginUpgrade pidgin-perlUpgrade libpurple-tclUpgrade finchUpgrade libpurple-devel | Aug 28, 2019 | Oct 29, 2014 |
| Debian | — | Upgrade pidgin | Jul 30, 2024 | Oct 29, 2014 |
| Freebsd | — | Upgrade pidginUpgrade libpurple | Dec 10, 2025 | Oct 24, 2014 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libpurple | Nov 30, 2017 | Oct 29, 2014 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libpurple | Nov 30, 2017 | Oct 29, 2014 |
| Oracle Solaris | — | Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.3.0.0.28.0 on Solaris 11.3Upgrade communication/im/pidgin to version 2.10.11-0.175.2.11.0.3.0 on Solaris 11.2 | May 29, 2017 | Oct 29, 2014 |
| Oracle_linux | — | Upgrade finchUpgrade libpurple-develUpgrade pidginUpgrade finch-develUpgrade pidgin-develUpgrade libpurpleUpgrade pidgin-perlUpgrade libpurple-perlUpgrade libpurple-tcl | Aug 8, 2017 | Oct 22, 2014 |
| Redhat_linux | — | Upgrade pidgin-develUpgrade finch-develNo solution existsUpgrade pidgin-perlUpgrade pidginUpgrade pidgin-debuginfoUpgrade libpurpleUpgrade libpurple-perlUpgrade finchUpgrade libpurple-develUpgrade libpurple-tcl | Aug 3, 2017 | Oct 29, 2014 |
| Suse | — | Upgrade libpurpleUpgrade libpurple-plugin-sametimeUpgrade finchUpgrade libpurple-meanwhileUpgrade pidgin-develUpgrade libpurple-langUpgrade libpurple-develUpgrade libpurple-tclUpgrade pidginUpgrade finch-develUpgrade libpurple-branding-upstream | Dec 18, 2015 | Oct 29, 2014 |
| Ubuntu | — | Upgrade libpurple0Upgrade pidgin | Nov 8, 2024 | Oct 29, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub